--- /dev/null
+##
+## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
+## USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
+##
+
+Use common-debian-service-https-redirect * planet-master.debian.org
+<VirtualHost *:443>
+ ServerName planet-master.debian.org
+ ServerAdmin debian-admin@lists.debian.org
+
+ Use common-debian-service-ssl planet-master.debian.org
+ Use common-ssl-HSTS
+
+ <IfModule mod_userdir.c>
+ UserDir disabled
+ </IfModule>
+ ErrorLog ${APACHE_LOG_DIR}/planet-master.debian.org-error.log
+ CustomLog ${APACHE_LOG_DIR}/planet-master.debian.org-access.log privacy
+ ServerSignature On
+
+ DocumentRoot /srv/planet.debian.org/www
+ <Directory /srv/planet.debian.org/www>
+ # Localhost
+ Require ip ::1
+ Require ip 127.0.0.1
+<%=
+ lines = []
+ roles = scope.lookupvar('site::roles')
+ roles['planet_master'].each do |node|
+ lines << "\t\t# #{scope.lookupvar('site::allnodeinfo')[node]['hostname'][0]}"
+ scope.lookupvar('site::allnodeinfo')[node]['ipHostNumber'].each do |addr|
+ lines << "\t\tRequire ip #{addr}"
+ end
+ end
+ lines.join("\n")
+# vim:set et:
+# vim:set sts=2 ts=2:
+# vim:set shiftwidth=2:
+%>
+ </Directory>
+</VirtualHost>