]> git.donarmstrong.com Git - dsa-puppet.git/commitdiff
remove unger
authorMartin Zobel-Helas <zobel@debian.org>
Sun, 22 Sep 2013 12:58:35 +0000 (14:58 +0200)
committerMartin Zobel-Helas <zobel@debian.org>
Sun, 22 Sep 2013 12:58:35 +0000 (14:58 +0200)
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
modules/debian-org/misc/local.yaml
modules/ferm/manifests/per-host.pp
modules/ferm/templates/defs.conf.erb
modules/ferm/templates/me.conf.erb
modules/sudo/files/sudoers

index edfa9be18e0de68e951cd01e590df6dcbd7a61ee..06ae289588db2a49d21ac9ee155ff01791239f6d 100644 (file)
@@ -131,7 +131,6 @@ nameinfo:
   tristano.debian.org: Gerardo Tristano (July 1st, 1955 - ongoing)
   tye.debian.org: Christopher Tye (c.1505 - 1573)
   ullmann.debian.org: Viktor Ullmann (January 1st, 1898 - October 17th, 1944)
-  unger.debian.org: Caroline Unger (October 28th, 1803 - March 23th, 1877)
   vento.debian.org: Ivo de Vento (1543/1545 - 1575)
   vieuxtemps.debian.org: Henri Vieuxtemps (February 17th, 1820 - June 6th, 1881)
   vitry.debian.org: Philippe de Vitry (October 31st, 1291 - June 9th, 1361)
@@ -227,7 +226,6 @@ host_settings:
     - cilea.debian.org
     - rautavaara.debian.org
     - scelsi.debian.org
-    - unger.debian.org
     - vitry.debian.org
     # dead/not running
     - berlioz.debian.org
index bb459e381e1ee5ba40285e6a6da65ca24958dc48..725fc6d260171e2c3609eb4da5219b2caf158dda 100644 (file)
@@ -116,22 +116,6 @@ class ferm::per-host {
                                rule            => '&TCP_UDP_SERVICE(5080)'
                        }
                }
-               unger: {
-                       @ferm::rule { 'dsa-notrack-dns-diamond-in':
-                               domain      => 'ip',
-                               description => 'NOTRACK for nameserver traffic',
-                               table       => 'raw',
-                               chain       => 'PREROUTING',
-                               rule        => 'destination 82.195.75.108 proto (tcp udp) dport 53 jump NOTRACK'
-                       }
-                       @ferm::rule { 'dsa-notrack-dns-diamond-out':
-                               domain      => 'ip',
-                               description => 'NOTRACK for nameserver traffic',
-                               table       => 'raw',
-                               chain       => 'PREROUTING',
-                               rule        => 'source 82.195.75.108 proto (tcp udp) sport 53 jump NOTRACK'
-                       }
-               }
                sonntag: {
                        @ferm::rule { 'dsa-bugs-search':
                                description  => 'port 1978 for bugs-search from bug web frontends',
index 8a6ece1ed3c7c45918c395399305a484e6f4fda8..f201061b93506f56af45466f922f6486007a992c 100644 (file)
 @def $FREEBSD_SSH_ACCESS = ();
 @def $FREEBSD_SSH_ACCESS = ($FREEBSD_SSH_ACCESS $DSA_IPS $BUILDD_SSH_ACCESS);
 @def $FREEBSD_SSH_ACCESS = ($FREEBSD_SSH_ACCESS $USER_christoph $USER_aurel32); # buildd admins
-@def $UNGER_SSH_ACCESS = ();
-@def $UNGER_SSH_ACCESS = ($UNGER_SSH_ACCESS $USER_joerg);
-@def $UNGER_SSH6_ACCESS = ();
-@def $UNGER_SSH6_ACCESS = ($UNGER_SSH6_ACCESS $USER_joerg6);
index 3a726d642b67627f8b65b79301404db72036b14a..fcd13013f59f92cc818702a426ac803bf128ffe1 100644 (file)
@@ -35,10 +35,6 @@ if restrict_ssh.include?(hostname) then
                ssh4allowed << '$HOST_DEBIAN_V4'
                ssh6allowed << '$HOST_DEBIAN_V6'
        end
-       if %w{unger}.include?(hostname) then
-               ssh4allowed << '$UNGER_SSH_ACCESS'  # Ganneff
-               ssh6allowed << '$UNGER_SSH6_ACCESS' # Ganneff, but more address space
-       end
 
        if %w{adayevskaya}.include?(hostname) then
                ssh4allowed << %w{$HOST_MAILRELAY_V4}
index 42f27907bbc74f5a0c11ef333c1088887129b3df..edab31ec657440326a1bb24f30fb52ad2659c622 100644 (file)
@@ -144,8 +144,6 @@ piupartss   PIUPARTS_SLAVE_HOSTS=(ALL)              NOPASSWD: ALL
 %dnsadm                draghi,orff=(root)              NOPASSWD: /etc/init.d/bind9 reload
 %dnsadm                draghi,orff=(geodnssync)        NOPASSWD: /usr/bin/make -C /srv/dns.debian.org/geo
 %adm           draghi=(puppet)                 NOPASSWD: /usr/bin/make -s -C /srv/db.debian.org/var/gitnagios/dsa-nagios/config install
-# remote power to babylon5 in the same rack:
-joerg          unger=(ALL)             /usr/bin/sispmctl -t [12], /usr/bin/sispmctl -g [12]
 # wbadm can update all buildd* users' keys on buildd.d.o
 %wbadm         BUILDD_MASTER=(wb-buildd)       ALL
 %wbadm         BUILDD_MASTER=(root)            /usr/local/bin/update-buildd-sshkeys