switch postfix smarthost config to classparams
[mirror/dsa-puppet.git] / data / common.yaml
1 ---
2
3 lookup_options:
4   # with merge: unique entries in other hiera sources add to the array
5   resolv::searchpaths:
6     merge: unique
7   apt::sources::debian::location:
8     merge: unique
9
10 # class parameters
11 resolv::nameservers: []
12 resolv::searchpaths: ['debian.org']
13 staticsync::user: 'staticsync'
14 staticsync::basedir: '/srv/static.debian.org'
15 exim::smarthost: 'mailout.debian.org'
16 postfix::smarthost: 'mailout.debian.org'
17
18 roles::dns_primary::allow_access:
19   # easydns
20   - '64.68.200.91'
21   - '205.210.42.80'
22   # rcode0
23   - '83.136.34.0/27'
24   - '2a02:850:8::/47'
25   # netnod
26   - '192.71.80.0/24'
27   - '192.36.144.222'
28   - '192.36.144.218'
29   - '194.146.105.24'
30   - '194.146.105.25'
31   - '2a01:3f0:0:27::24'
32   - '2a01:3f0:0:28::25'
33
34 # other variables
35 allow_dns_query: []
36 role_config__mirrors:
37   mirror_basedir_prefix: '/srv/mirrors/'
38 role_config__syncproxy:
39   mirror_basedir_prefix: '/srv/mirrors/'
40 samhain_recipients:
41   - 'debian-archive-debian-samhain-reports@master.debian.org'
42   - 'debian-admin@ftbfs.de'
43   - 'weasel@debian.org'
44   - 'zumbi@oron.es'
45 root_mail_alias:
46   - 'debian-admin@debian.org'
47 paths:
48   letsencrypt_dir: '/srv/puppet.debian.org/from-letsencrypt'
49   auto_certs_dir: '/srv/puppet.debian.org/ca/RESULT/certs'
50   auto_clientcerts_dir: '/srv/puppet.debian.org/ca/RESULT/clientcerts'
51 apt::sources::debian::location: 'https://deb.debian.org/debian/'
52
53
54 # all of these should be retired in favour of including the class role
55 # with the host. weasel, 2019-09
56 roles:
57   ftp_master:
58     # XXX - used by ferm templates/defs.conf.erb
59     - fasolo.debian.org
60   mailrelay:
61     # XXX - ONLY used by ferm templates/defs.conf.erb
62     - mailly.debian.org
63     - muffat.debian.org
64   muninmaster:
65     # XXX - used by ferm templates/defs.conf.erb
66     - menotti.debian.org
67   nagiosmaster:
68     # XXX - used by ferm templates/defs.conf.erb
69     - tchaikovsky.debian.org
70   security_master:
71     # XXX - used by ferm templates/defs.conf.erb
72     - seger.debian.org
73   security_mirror:
74     # XXX used also in ferm me.conf.erb
75     mirror-anu.debian.org:
76       fastly-backend: false
77     mirror-csail.debian.org:
78       fastly-backend: false
79     mirror-isc.debian.org:
80       onion_v4_address: 149.20.4.14
81     mirror-umn.debian.org:
82       onion_v4_address: 128.101.240.215
83     mirror-accumu.debian.org:
84       fastly-backend: false
85     mirror-skroutz.debian.org:
86       fastly-backend: false
87     lobos.debian.org:
88       service-hostname: lobos.security.backend.mirrors.debian.org
89       fastly-backend: false
90       onion_v4_address: 212.211.132.250
91     santoro.debian.org:
92       fastly-backend: false
93     schmelzer.debian.org:
94       fastly-backend: false
95     schumann.debian.org:
96       service-hostname: schumann.security.backend.mirrors.debian.org
97       fastly-backend: true
98     setoguchi.debian.org:
99       fastly-backend: false
100     sechter.debian.org:
101       fastly-backend: false
102     villa.debian.org:
103       service-hostname: villa.security.backend.mirrors.debian.org
104       fastly-backend: true
105       onion_v4_address: 212.211.132.32
106     wieck.debian.org:
107       service-hostname: wieck.security.backend.mirrors.debian.org
108       fastly-backend: true
109   postgres_backup_server:
110     # XXX - used by ferm templates/defs.conf.erb
111     - backuphost.debian.org
112     - storace.debian.org
113   debian_mirror:
114     # XXX used also in ferm me.conf.erb
115     klecker.debian.org:
116       listen-addresses:
117         - '130.89.148.12:80'
118         - '[2001:67c:2564:a119::148:12]:80'
119       onion_v4_address: 130.89.148.12
120     new-klecker.debian.org: {}
121     mirror-accumu.debian.org:
122       service-hostname: accumu.debian.backend.mirrors.debian.org
123       fastly-backend: true
124     mirror-skroutz.debian.org:
125       service-hostname: skroutz.debian.backend.mirrors.debian.org
126       fastly-backend: true
127     mirror-isc.debian.org:
128       listen-addresses:
129         - '149.20.4.15:80'
130         - '[2001:4f8:1:c::15]:80'
131       onion_v4_address: 149.20.4.15
132     schmelzer.debian.org:
133       listen-addresses:
134         - '217.196.149.232:80'
135         - '[2a02:16a8:dc41:100::232]:80'
136       fastly-backend: true
137       service-hostname: conova.debian.backend.mirrors.debian.org
138   historical_master:
139     # XXX - used by ferm templates/defs.conf.erb
140     - sibelius.debian.org
141   historical_mirror:
142     # XXX used also in ferm me.conf.erb
143     - gretchaninov.debian.org
144     - klecker.debian.org
145     - schmelzer.debian.org
146     - sibelius.debian.org
147   debug_mirror:
148     # XXX used also in ferm me.conf.erb
149     mirror-accumu.debian.org:
150       onion_v4_address: 130.242.6.199
151       service-hostname: accumu.debug.backend.mirrors.debian.org
152     schmelzer.debian.org:
153       listen-addresses:
154         - '217.196.149.232:80'
155         - '[2a02:16a8:dc41:100::232]:80'
156       onion_v4_address: 217.196.149.232
157       service-hostname: conova.debug.backend.mirrors.debian.org
158   debug_mirror_onion:
159     - mirror-accumu.debian.org
160     - schmelzer.debian.org
161   ports_master:
162     # XXX - used by ferm templates/defs.conf.erb
163     - porta.debian.org
164   bgp:
165     - mirror-accumu.debian.org
166     - mirror-skroutz.debian.org
167   postgresql_server:
168     # postgresql instances not managed by puppet otherwise
169     - bmdb1.debian.org
170     - buxtehude.debian.org
171     - danzi.debian.org
172     - fasolo.debian.org
173     - lw07.debian.org
174     - melartin.debian.org
175     - postgresql-manda-01.debian.org
176     - sallinen.debian.org
177     - seger.debian.org
178     - snapshotdb-manda-01.debian.org
179     - vittoria.debian.org
180
181 classes:
182   - base::includes