exim: build submission domain list dynamically

[mirror/dsa-puppet.git] / modules / roles / manifests / bugs_master.pp

diff --git a/modules/roles/manifests/bugs_master.pp b/modules/roles/manifests/bugs_master.pp
index 301f473..c366d0c 100644 (file)
--- a/modules/roles/manifests/bugs_master.pp
+++ b/modules/roles/manifests/bugs_master.pp
@@ -4,8 +4,16 @@ class roles::bugs_master {
   ssl::service { 'bugs-devel.debian.org': notify  => Exec['service apache2 reload'], key => true, }
   ssl::service { 'bugs-master.debian.org': notify  => Exec['service apache2 reload'], key => true, }
 
+  # Note that there is also role specific config in exim4.conf
   exim::vdomain { 'bugs.debian.org':
     owner => 'debbugs',
     group => 'debbugs',
   }
+
+  # The bugs service accepts bug reports on the submission port
+  exim::submissiondomain { 'bugs.debian.org': }
+  ferm::rule::simple { 'bugs-submission':
+    description => 'Allow submission access from the world',
+    port        => 'submission',
+  }
 }