restrict security-master's rsync for the archive

diff --git a/modules/roles/files/security_master/rsyncd.conf b/modules/roles/files/security_master/rsyncd.conf
index 34e00282594b60ecee7c081f6c49f091bf57986f..1049ea6ecd7f5f29abb3c7598283e75f2e37db26 100644 (file)
--- a/modules/roles/files/security_master/rsyncd.conf
+++ b/modules/roles/files/security_master/rsyncd.conf
@@ -10,6 +10,7 @@ log file = /var/log/rsyncd/rsyncd.log
   path = /srv/security.debian.org/archive/debian-security/
   comment = Debian security archive
   read only = true
+  secrets file = /etc/rsyncd/exports.secrets
   list = no
 
 [exports]