--- lookup_options: # with merge: unique entries in other hiera sources add to the array resolv::searchpaths: merge: unique apt::sources::debian::location: merge: unique # == class parameters ##################### resolv::nameservers: [] resolv::searchpaths: ['debian.org'] staticsync::user: 'staticsync' staticsync::basedir: '/srv/static.debian.org' exim::smarthost: 'mailout.debian.org' postfix::smarthost: 'mailout.debian.org' roles::dns_primary::allow_access: # easydns - '64.68.200.91' - '205.210.42.80' # rcode0 - '83.136.34.0/27' - '2a02:850:8::/47' # netnod - '192.71.80.0/24' - '192.36.144.222' - '192.36.144.218' - '194.146.105.24' - '194.146.105.25' - '2a01:3f0:0:27::24' - '2a01:3f0:0:28::25' # bacula # bacula::operator_email: 'bacula-reports@admin.debian.org' bacula::ssl_ca_path: '/etc/ssl/debian/certs/ca.crt' bacula::ssl_client_cert: '/etc/ssl/debian/certs/thishost.crt' bacula::ssl_client_key: '/etc/ssl/private/thishost.key' bacula::ssl_server_cert: '/etc/ssl/debian/certs/thishost-server.crt' bacula::ssl_server_key: '/etc/ssl/private/thishost-server.key' bacula::director::db_address: 'postgresql-manda-01.debian.org' bacula::director::db_port: 5432 bacula::director::db_sslca: '/etc/ssl/debian/certs/ca.crt' bacula::director::pool_name: 'debian' bacula::client::director_server: dinis.debian.org bacula::client::storage_server: storace.debian.org # == other variables ##################### allow_dns_query: [] role_config__mirrors: mirror_basedir_prefix: '/srv/mirrors/' role_config__syncproxy: mirror_basedir_prefix: '/srv/mirrors/' samhain_recipients: - 'debian-archive-debian-samhain-reports@master.debian.org' - 'debian-admin@ftbfs.de' - 'weasel@debian.org' - 'zumbi@oron.es' root_mail_alias: - 'debian-admin@debian.org' paths: letsencrypt_dir: '/srv/puppet.debian.org/from-letsencrypt' auto_certs_dir: '/srv/puppet.debian.org/ca/RESULT/certs' auto_clientcerts_dir: '/srv/puppet.debian.org/ca/RESULT/clientcerts' apt::sources::debian::location: 'https://deb.debian.org/debian/' # all of these should be retired in favour of including the class role # with the host. weasel, 2019-09 roles: postgres_backup_server: # XXX - used by ferm templates/defs.conf.erb - backuphost.debian.org - storace.debian.org postgresql_server: # postgresql instances not managed by puppet otherwise - bmdb1.debian.org - buxtehude.debian.org - danzi.debian.org - fasolo.debian.org - lw07.debian.org - melartin.debian.org - postgresql-manda-01.debian.org - sallinen.debian.org - seger.debian.org - snapshotdb-manda-01.debian.org - vittoria.debian.org classes: - base::includes