d7489e6a88df2b204163cf6554b92a29d6a4c702
[mirror/dsa-puppet.git] / data / common.yaml
1 ---
2
3 lookup_options:
4   # with merge: unique entries in other hiera sources add to the array
5   resolv::searchpaths:
6     merge: unique
7   apt::sources::debian::location:
8     merge: unique
9
10 # class parameters
11 resolv::nameservers: []
12 resolv::searchpaths: ['debian.org']
13 staticsync::user: 'staticsync'
14 staticsync::basedir: '/srv/static.debian.org'
15 exim::smarthost: 'mailout.debian.org'
16 postfix::smarthost: 'mailout.debian.org'
17
18 roles::dns_primary::allow_access:
19   # easydns
20   - '64.68.200.91'
21   - '205.210.42.80'
22   # rcode0
23   - '83.136.34.0/27'
24   - '2a02:850:8::/47'
25   # netnod
26   - '192.71.80.0/24'
27   - '192.36.144.222'
28   - '192.36.144.218'
29   - '194.146.105.24'
30   - '194.146.105.25'
31   - '2a01:3f0:0:27::24'
32   - '2a01:3f0:0:28::25'
33
34 # other variables
35 allow_dns_query: []
36 role_config__mirrors:
37   mirror_basedir_prefix: '/srv/mirrors/'
38 role_config__syncproxy:
39   mirror_basedir_prefix: '/srv/mirrors/'
40 samhain_recipients:
41   - 'debian-archive-debian-samhain-reports@master.debian.org'
42   - 'debian-admin@ftbfs.de'
43   - 'weasel@debian.org'
44   - 'zumbi@oron.es'
45 root_mail_alias:
46   - 'debian-admin@debian.org'
47 paths:
48   letsencrypt_dir: '/srv/puppet.debian.org/from-letsencrypt'
49   auto_certs_dir: '/srv/puppet.debian.org/ca/RESULT/certs'
50   auto_clientcerts_dir: '/srv/puppet.debian.org/ca/RESULT/clientcerts'
51 apt::sources::debian::location: 'https://deb.debian.org/debian/'
52
53
54 # all of these should be retired in favour of including the class role
55 # with the host. weasel, 2019-09
56 roles:
57   muninmaster:
58     # XXX - used by ferm templates/defs.conf.erb
59     - menotti.debian.org
60   nagiosmaster:
61     # XXX - used by ferm templates/defs.conf.erb
62     - tchaikovsky.debian.org
63   security_mirror:
64     # XXX used also in ferm me.conf.erb
65     mirror-anu.debian.org:
66       fastly-backend: false
67     mirror-csail.debian.org:
68       fastly-backend: false
69     mirror-isc.debian.org:
70       onion_v4_address: 149.20.4.14
71     mirror-umn.debian.org:
72       onion_v4_address: 128.101.240.215
73     mirror-accumu.debian.org:
74       fastly-backend: false
75     mirror-skroutz.debian.org:
76       fastly-backend: false
77     lobos.debian.org:
78       service-hostname: lobos.security.backend.mirrors.debian.org
79       fastly-backend: false
80       onion_v4_address: 212.211.132.250
81     santoro.debian.org:
82       fastly-backend: false
83     schmelzer.debian.org:
84       fastly-backend: false
85     schumann.debian.org:
86       service-hostname: schumann.security.backend.mirrors.debian.org
87       fastly-backend: true
88     setoguchi.debian.org:
89       fastly-backend: false
90     sechter.debian.org:
91       fastly-backend: false
92     villa.debian.org:
93       service-hostname: villa.security.backend.mirrors.debian.org
94       fastly-backend: true
95       onion_v4_address: 212.211.132.32
96     wieck.debian.org:
97       service-hostname: wieck.security.backend.mirrors.debian.org
98       fastly-backend: true
99   postgres_backup_server:
100     # XXX - used by ferm templates/defs.conf.erb
101     - backuphost.debian.org
102     - storace.debian.org
103   debian_mirror:
104     # XXX used also in ferm me.conf.erb
105     new-klecker.debian.org: {}
106       listen-addresses:
107         - '130.89.148.12:80'
108         - '[2001:67c:2564:a119::148:12]:80'
109       onion_v4_address: 130.89.148.12
110     mirror-accumu.debian.org:
111       service-hostname: accumu.debian.backend.mirrors.debian.org
112       fastly-backend: true
113     mirror-skroutz.debian.org:
114       service-hostname: skroutz.debian.backend.mirrors.debian.org
115       fastly-backend: true
116     mirror-isc.debian.org:
117       listen-addresses:
118         - '149.20.4.15:80'
119         - '[2001:4f8:1:c::15]:80'
120       onion_v4_address: 149.20.4.15
121     schmelzer.debian.org:
122       listen-addresses:
123         - '217.196.149.232:80'
124         - '[2a02:16a8:dc41:100::232]:80'
125       fastly-backend: true
126       service-hostname: conova.debian.backend.mirrors.debian.org
127   debug_mirror:
128     # XXX still used by the mirror health stuff
129     mirror-accumu.debian.org:
130       service-hostname: accumu.debug.backend.mirrors.debian.org
131     schmelzer.debian.org:
132       service-hostname: conova.debug.backend.mirrors.debian.org
133   debug_mirror_onion:
134     - mirror-accumu.debian.org
135     - schmelzer.debian.org
136   bgp:
137     - mirror-accumu.debian.org
138     - mirror-skroutz.debian.org
139   postgresql_server:
140     # postgresql instances not managed by puppet otherwise
141     - bmdb1.debian.org
142     - buxtehude.debian.org
143     - danzi.debian.org
144     - fasolo.debian.org
145     - lw07.debian.org
146     - melartin.debian.org
147     - postgresql-manda-01.debian.org
148     - sallinen.debian.org
149     - seger.debian.org
150     - snapshotdb-manda-01.debian.org
151     - vittoria.debian.org
152
153 classes:
154   - base::includes