--- lookup_options: # with merge: unique entries in other hiera sources add to the array resolv::searchpaths: merge: unique apt::sources::debian::location: merge: unique # class parameters resolv::nameservers: [] resolv::searchpaths: ['debian.org'] staticsync::user: 'staticsync' staticsync::basedir: '/srv/static.debian.org' exim::smarthost: 'mailout.debian.org' postfix::smarthost: 'mailout.debian.org' roles::dns_primary::allow_access: # easydns - '64.68.200.91' - '205.210.42.80' # rcode0 - '83.136.34.0/27' - '2a02:850:8::/47' # netnod - '192.71.80.0/24' - '192.36.144.222' - '192.36.144.218' - '194.146.105.24' - '194.146.105.25' - '2a01:3f0:0:27::24' - '2a01:3f0:0:28::25' # other variables allow_dns_query: [] role_config__mirrors: mirror_basedir_prefix: '/srv/mirrors/' role_config__syncproxy: mirror_basedir_prefix: '/srv/mirrors/' samhain_recipients: - 'debian-archive-debian-samhain-reports@master.debian.org' - 'debian-admin@ftbfs.de' - 'weasel@debian.org' - 'zumbi@oron.es' root_mail_alias: - 'debian-admin@debian.org' paths: letsencrypt_dir: '/srv/puppet.debian.org/from-letsencrypt' auto_certs_dir: '/srv/puppet.debian.org/ca/RESULT/certs' auto_clientcerts_dir: '/srv/puppet.debian.org/ca/RESULT/clientcerts' apt::sources::debian::location: 'https://deb.debian.org/debian/' # all of these should be retired in favour of including the class role # with the host. weasel, 2019-09 roles: postgres_backup_server: # XXX - used by ferm templates/defs.conf.erb - backuphost.debian.org - storace.debian.org postgresql_server: # postgresql instances not managed by puppet otherwise - bmdb1.debian.org - buxtehude.debian.org - danzi.debian.org - fasolo.debian.org - lw07.debian.org - melartin.debian.org - postgresql-manda-01.debian.org - sallinen.debian.org - seger.debian.org - snapshotdb-manda-01.debian.org - vittoria.debian.org classes: - base::includes