nm.d.o no longer needs access to projectb on bmdb1
[mirror/dsa-puppet.git] / modules / roles / manifests / dsa_gitolite.pp
1 # dsa's gitolite host
2 class roles::dsa_gitolite {
3   # we push various things
4   $key = $facts['git_key']
5
6   if ($key) {
7     ssh::authorized_key_add { 'dsa_gitolite::dsa_wiki_buildhost':
8       target_user => 'dsa',
9       command     => '/srv/dsa.debian.org/bin/update',
10       key         => $facts['git_key'],
11       collect_tag => 'dsa_wiki_buildhost',
12     }
13
14     ssh::authorized_key_add { 'dsa_gitolite::puppetmaster':
15       target_user => 'dsa',
16       command     => '/srv/puppet.debian.org/bin/update-git',
17       key         => $facts['git_key'],
18       collect_tag => 'puppetmaster',
19     }
20
21
22     ssh::authorized_key_add { 'dsa_gitolite::dns_primary_dnsadm':
23       target_user => 'dnsadm',
24       command     => '/srv/dns.debian.org/bin/from-adayevskaya',
25       key         => $facts['git_key'],
26       collect_tag => 'dns_primary',
27     }
28
29     ssh::authorized_key_add { 'dsa_gitolite::dns_primary_letsencrypt':
30       target_user => 'letsencrypt',
31       command     => '/srv/letsencrypt.debian.org/bin/from-adayevskaya',
32       key         => $facts['git_key'],
33       collect_tag => 'dns_primary',
34     }
35   }
36 }