Switch db.d.o to letsencrypt
[mirror/dsa-puppet.git] / modules / roles / manifests / dbmaster.pp
1 # = Class: roles::dbmaster
2 #
3 # Setup for db.debian.org master host
4 #
5 # == Sample Usage:
6 #
7 #   include roles::dbmaster
8 #
9 class roles::dbmaster {
10
11         include roles::pubsub::parameters
12
13         $rabbit_password = $roles::pubsub::parameters::rabbit_password
14
15         ssl::service { 'db.debian.org':
16                 notify  => Exec['service apache2 reload'],
17                 key => true,
18                 tlsaport => [443, 389, 636],
19         }
20
21         file { "/etc/ldap/db.debian.org.key":
22                ensure => present,
23                mode   => '0440',
24                group  => 'openldap',
25                source => 'puppet:///modules/ssl/from-letsencrypt/db.debian.org.key',
26                links  => follow,
27         }
28
29         roles::pubsub::config { 'generate':
30                 key      => 'dsa-udgenerate',
31                 exchange => dsa,
32                 topic    => 'dsa.ud.replicate',
33                 vhost    => dsa,
34                 username => $::fqdn,
35                 password => $rabbit_password
36         }
37 }