I think keys for root's auth keys should not be our every-day ssh key.  they should be specially protected keys, not usually loaded into an agent.  Start by removing my daily use keys

mode and whitespace for /etc/ssh/userkeys/root

Signed-off-by: Stephen Gran <steve@lobefin.net>

ignore /etc/ssh/userkeys/root

Signed-off-by: Stephen Gran <steve@lobefin.net>

First check in of authoized_keys - no functional difference yet, just
replacing existing manual method.  let's clean this up a bit.
Signed-off-by: Stephen Gran <steve@lobefin.net>

let's see if we can make the lspci test quiet

Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

Grumble grumble - erb strikes again
Signed-off-by: Stephen Gran <steve@lobefin.net>

gluck does not need to listen on 443 anymore - that was just for when it was people.do

samhain ignore the new files as well
Signed-off-by: Stephen Gran <steve@lobefin.net>

Restart ssh when config file changes
Signed-off-by: Stephen Gran <steve@lobefin.net>

https://rt.debian.org/Ticket/Display.html?id=1606
block mail from bp06.net, who carries Cdiscount.co.uk mail
Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

adding kassia, saens schein and steffani

add villa and lobos

add wieck.debian.org

rename file

next try

fix class name

default puppet disclaimer

new security.d.o apache2 class

Add ssh module
Signed-off-by: Stephen Gran <steve@lobefin.net>

nagios arcconf on morricone

backports

Add morricone

make sure puppet does not start

Add some rbl stuff for press@ and events@, remove one rbl for somebody
else
Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

* 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet:
  Add host based blacklist
  Will this fix it?  Who knows?  Who understands the mystery of the puppet?

samhain ignore exim4/host_blacklist

Add host based blacklist
Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

Will this fix it?  Who knows?  Who understands the mystery of the puppet?
Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

* 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet:
  Hi, my name is Steve, and I can read

new kvm on unger

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

Hi, my name is Steve, and I can read
Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

* 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet:
  some printf debugging
  add log message
  Make postmasterish mails go to d-a.
  Allow blacklists
  Discard mails when asked to
  please to be quiet, zelenka

Ignore userdir-ldap on draghi

some printf debugging
Signed-off-by: Stephen Gran <steve@lobefin.net>

add log message
Signed-off-by: Stephen Gran <steve@lobefin.net>

Make postmasterish mails go to d-a.
Signed-off-by: Stephen Gran <steve@lobefin.net>

Allow blacklists
Signed-off-by: Stephen Gran <steve@lobefin.net>

Discard mails when asked to
Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

please to be quiet, zelenka
Signed-off-by: Stephen Gran <steve@lobefin.net>

Add byrd

the whitespace nazi strikes again

do buildd related mail on cimarosa

Re-add puppetmaster restart

rename dijkstra dijkstra.debian.org

samhain Ignore parts of /etc/spamassassin/sa-update-keys

buildd update ssh keys on cimarosa

cimarosa apache

Better (quieter) puppet options
Signed-off-by: Stephen Gran <steve@lobefin.net>

syntax is my friend

Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

stop trying to start/reload/stop/etc puppet

Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of git+ssh://zobel@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet

planet archive on rore

Again, dammit
Signed-off-by: Stephen Gran <steve@lobefin.net>

oopsie
Signed-off-by: Stephen Gran <steve@lobefin.net>

sleep $(( $RANDOM % 3600 ))
Signed-off-by: Stephen Gran <steve@lobefin.net>

I have a cunning plan
Signed-off-by: Stephen Gran <steve@lobefin.net>

Puppet is getting run from cron - don't run it anymore
Signed-off-by: Stephen Gran <steve@lobefin.net>

Run puppet from cron now
Signed-off-by: Stephen Gran <steve@lobefin.net>

monit will now leave puppet alone
Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

samhain ignore new geodns files

Signed-off-by: Stephen Gran <steve@lobefin.net>

* new host alias webhosts
* make webmirror sudo job for host alias webhosts

fix broken file path

Merge branch 'master' of git+ssh://zobel@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet

add zone video.debconf.debian.org to named.conf.geo

add video.debconf.debian.org

make file more readable

ignore backported kvm on dijkstra

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

do not replace /var/log/apache2 symlinks with directories

Just alphabetization - no changes
Signed-off-by: Stephen Gran <steve@lobefin.net>

14:58 < weasel> mail- is redundant
Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

Make virtualdomains work with, and with * as LHS
Signed-off-by: Stephen Gran <steve@lobefin.net>

Add the hostname to the X-Surbl-Hit header

Don't force failure, force an empty expansion
Signed-off-by: Stephen Gran <steve@lobefin.net>

Make markup work for exim content inspection
Signed-off-by: Stephen Gran <steve@lobefin.net>

And samhain ignore the unofficial-sigs files
Signed-off-by: Stephen Gran <steve@lobefin.net>

Manage clamav-unofficial-sigs.  The dsa.conf removes all dbs marked as
high risk of false positives
Signed-off-by: Stephen Gran <steve@lobefin.net>

No mail at volatile-master

volatile.d.o virtual domain on valente

Add %volatile -> volatile

Merge branch 'master' of git+ssh://zobel@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet

remove apache log rotation for saens

saens only 30d

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

Get rid of ancient, outdated, wrongly hardcoded botch to deal with spam
flood that is long gone.
Signed-off-by: Stephen Gran <steve@lobefin.net>

Let's try to ignore the git dir on dijkstra
Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of git+ssh://zobel@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet

add wolkenstein.debian.org

Remove gluck from exim-heavy group
Signed-off-by: Stephen Gran <steve@lobefin.net>

Add unofficial sigs
Signed-off-by: Stephen Gran <steve@lobefin.net>

remove doubled entry saens.d.o

adding lobos, saens, steffani, villa, wieck to default-apache