Generate the apache ACL for draghi's "restricted" repo (RT#7962)

[mirror/dsa-puppet.git] / modules / debian_org / manifests / apt_restricted.pp

diff --git a/modules/debian_org/manifests/apt_restricted.pp b/modules/debian_org/manifests/apt_restricted.pp
index 4dd668a..ed5c0a0 100644 (file)
--- a/modules/debian_org/manifests/apt_restricted.pp
+++ b/modules/debian_org/manifests/apt_restricted.pp
@@ -1,7 +1,16 @@
 class debian_org::apt_restricted {
-       site::aptrepo { 'db.debian.org.restricted':
-               url        => 'http://db.debian.org/debian-admin',
+       base::aptrepo { 'db.debian.org.restricted':
+               url        => 'https://db.debian.org/debian-admin',
                suite      => "${::lsbdistcodename}-restricted",
                components => 'non-free',
        }
+
+       @@concat::fragment { "debian_org::apt_restricted::apache-acl::host::${name}":
+               tag        => 'debian_org::apt_restricted::apache-acl',
+               target     => '/etc/apache2/conf-available/puppet-restricted-acl.conf',
+               content    => @("EOF"),
+                       # ${::fqdn}
+                       Require ip ${::base::public_addresses}
+                       | EOF
+       }
 }