do not notify

remove quotations

those are ACLs, not views

fix typo

Merge branch 'master' of git+ssh://zobel@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet

add missing ;

We really want logrotated installed with apache

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

* 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet:
  add missing include

saens gets apache default config

move info on whether to install apache2 default config from manifest to nodeinfo/local.yaml

add missing include

new geoip dns setup

Remove pointer to http://lists.debian.org/debian-devel-announce/2003/debian-devel-announce-200312/msg00001.html from motds

Add duarte to local.yaml

remove geoip from puppet for now

ignore two powerdns related things in samhain

Merge branch 'master' of git+ssh://zobel@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet

update ip allocations

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>

Samhain ignore /etc/default/postgrey

obligatory puppet headers

Signed-off-by: Stephen Gran <steve@lobefin.net>

Add minimal clamav and postgrey classes to the exim::mx class
Signed-off-by: Stephen Gran <steve@lobefin.net>

Add packagesqamaster to the list that nodeinfo will return
Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

packages.qa is on master
Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of git+ssh://zobel@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet

gah. typo.

use \N in preference to escaping escapes

more escaping required

ahem.  Use the right key
Signed-off-by: Stephen Gran <steve@lobefin.net>

samhain ignore the new files for the surbl stuff
Signed-off-by: Stephen Gran <steve@lobefin.net>

Use new function.  This lets us keep the list of 'heavy-exim' hosts in
just one place.
Signed-off-by: Stephen Gran <steve@lobefin.net>

Add ability to extract keys from nodeinfo
Signed-off-by: Stephen Gran <steve@lobefin.net>

And add explicit accept at end of mime acl
Signed-off-by: Stephen Gran <steve@lobefin.net>

Revert "Revert "And another acl for exim"+1"

This reverts commit 4cb5fb5099d0c7177bce071920cecea8dcdda873.

Revert "And another acl for exim"+1

This reverts commits 3feb4c20b11b567a034e2ba06e45c066f380a4b9 and
b8fa816fa0c7ec2dc5d626b16ec4ef5f2afe1b6d.

These break some of our mail for now.

Let people know why their mail is being rejected with the new check
Signed-off-by: Stephen Gran <steve@lobefin.net>

Comment out the rbl.debian.net stuff while it's timing out all the time
Signed-off-by: Stephen Gran <steve@lobefin.net>

Add the check to a few more hosts
Signed-off-by: Stephen Gran <steve@lobefin.net>

This works better, even though it's a little more tedious
Signed-off-by: Stephen Gran <steve@lobefin.net>

And another acl for exim
Signed-off-by: Stephen Gran <steve@lobefin.net>

And more syntax thing
Signed-off-by: Stephen Gran <steve@lobefin.net>

And restart exim if the perl script changes
Signed-off-by: Stephen Gran <steve@lobefin.net>

New class
Signed-off-by: Stephen Gran <steve@lobefin.net>

Some syntax things
Signed-off-by: Stephen Gran <steve@lobefin.net>

Let's try a nice SURBL lookup for the PTS mail
Signed-off-by: Stephen Gran <steve@lobefin.net>

Remove some logic from machines that don't need it
Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

Make clients only use tls with smarthost
Signed-off-by: Stephen Gran <steve@lobefin.net>

break logging for cord

delaycompress for mail.log

Push apache defaults to piatti

Ignore syslog-ng config in samhain

Move some entries around (staying in the same section) so that the comment is right again

And push out syslog-ng.conf and logrotate.d/syslog-ng

user.log a+r

mail.log is gid maillog

Rotate mail daily, keep 30, and use date extension

Add default /etc/syslog-ng/syslog-ng.conf and /etc/logrotate.d/syslog-ng

whee.  Let's change all the syslogging without watching
Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

* 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet:
  And use the right variable name
  Put the puppet block in [IgnoreAll] on handel
  get rid of old flat files
  Get rid of duplicate line
  Use the right variable
  Need to include samhain after we get nodeinfo
  let's try to actually use the case syntax that ruby uses
  Fixup
  Push out new template
  Actually get the output of the block
  First pass at a samhain template

Ignore amavisd-new on liszt

And use the right variable name
Signed-off-by: Stephen Gran <steve@lobefin.net>

Put the puppet block in [IgnoreAll] on handel
Signed-off-by: Stephen Gran <steve@lobefin.net>

get rid of old flat files
Signed-off-by: Stephen Gran <steve@lobefin.net>

Get rid of duplicate line
Signed-off-by: Stephen Gran <steve@lobefin.net>

Use the right variable
Signed-off-by: Stephen Gran <steve@lobefin.net>

Need to include samhain after we get nodeinfo
Signed-off-by: Stephen Gran <steve@lobefin.net>

let's try to actually use the case syntax that ruby uses
Signed-off-by: Stephen Gran <steve@lobefin.net>

Fixup
Signed-off-by: Stephen Gran <steve@lobefin.net>

Push out new template
Signed-off-by: Stephen Gran <steve@lobefin.net>

Actually get the output of the block
Signed-off-by: Stephen Gran <steve@lobefin.net>

First pass at a samhain template
Signed-off-by: Stephen Gran <steve@lobefin.net>

Make liszt use the common sudoers file

prepare a named-security module that handles the config that is currently in dsa-misc.

push our standard apache stuff to duarte

syntax fix

run apt-get update after modifying sources lists

paer to buildd group

Ignore some locally backported packages for samosa, add puppet headers

apache2 config on samosa

comment nitpicks

First take at integrating liszt's sudoers file

Remove common/exim4.conf
Signed-off-by: Stephen Gran <steve@lobefin.net>

New template for all.
Signed-off-by: Stephen Gran <steve@lobefin.net>

Make smarthost transport fully conditional instead of partly
Signed-off-by: Stephen Gran <steve@lobefin.net>

last service host
Signed-off-by: Stephen Gran <steve@lobefin.net>

Last two mail relay hosts
Signed-off-by: Stephen Gran <steve@lobefin.net>

double escape, it seems like
Signed-off-by: Stephen Gran <steve@lobefin.net>

Add spohr
Signed-off-by: Stephen Gran <steve@lobefin.net>

Again with cast to a string
Signed-off-by: Stephen Gran <steve@lobefin.net>

Use the hash variable
Signed-off-by: Stephen Gran <steve@lobefin.net>

Add piatti
Signed-off-by: Stephen Gran <steve@lobefin.net>

Need to cast to a string to evaluate
Signed-off-by: Stephen Gran <steve@lobefin.net>

Add kassia
Signed-off-by: Stephen Gran <steve@lobefin.net>

Right.  For some reason, they're strings, not booleans
Signed-off-by: Stephen Gran <steve@lobefin.net>

or like this
Signed-off-by: Stephen Gran <steve@lobefin.net>

Let's try it this way
Signed-off-by: Stephen Gran <steve@lobefin.net>

Can't redefine exim4.conf statement
Signed-off-by: Stephen Gran <steve@lobefin.net>

Stop confusing variable names
Signed-off-by: Stephen Gran <steve@lobefin.net>

escape some quotes
Signed-off-by: Stephen Gran <steve@lobefin.net>