nm.d.o no longer needs access to projectb on bmdb1
[mirror/dsa-puppet.git] / modules / roles / manifests / nm.pp
1 # nm.debian.org role
2 #
3 # @param db_address     hostname of the postgres server for this service
4 # @param db_port        port of the postgres server for this service
5 class roles::nm (
6   String  $db_address,
7   Integer $db_port,
8 ) {
9   include apache2
10   include roles::sso_rp
11
12   ssl::service { 'nm.debian.org':
13     notify => Exec['service apache2 reload'],
14     key    => true,
15   }
16
17   exim::vdomain { 'nm.debian.org':
18     owner => 'nm',
19     group => 'nm',
20   }
21
22   @@postgres::cluster::hba_entry { "nm-${::fqdn}":
23     tag      => "postgres::cluster::${db_port}::hba::${db_address}",
24     pg_port  => $db_port,
25     database => ['nm', 'contributors'],
26     user     => ['nm', 'nmweb'],
27     address  => $base::public_addresses,
28   }
29
30   include roles::postgresql::ftp_master_dak_replica::db_guest_access::ubc
31 }