Deploy gobby cert to gombert

diff --git a/hieradata/common.yaml b/hieradata/common.yaml
index 872ad67a330b32a58da713a38adc7472e9f0fe4b..1797b058810bd18ea6fc9d37ba5edaddfb0dfe17 100644 (file)
--- a/hieradata/common.yaml
+++ b/hieradata/common.yaml
@@ -115,3 +115,5 @@ roles:
     - wolkenstein.debian.org
   postgres_backup_server:
     - backuphost.debian.org
+  gobby_debian_org:
+    - gombert.debian.org:

diff --git a/modules/roles/manifests/init.pp b/modules/roles/manifests/init.pp
index 249dde66973dde55bd610f8dd615645ce76c9018..b79a090aab5b379a8d9166d8f79c2c1a626f8fef 100644 (file)
--- a/modules/roles/manifests/init.pp
+++ b/modules/roles/manifests/init.pp
@@ -190,4 +190,10 @@ class roles {
                        notify => Service['apache2'],
                }
        }
+
+       if has_role('gobby_debian_org') {
+               ssl::service { 'gobby.debian.org':
+                       tlsaport => 0,
+               }
+       }
 }