Install cert on packages hosts

diff --git a/hieradata/common.yaml b/hieradata/common.yaml
index 8059c5d1839fb04045f7aa9c312163da659bc0a8..a87928451af0d52358435d9bcf9772de652d9403 100644 (file)
--- a/hieradata/common.yaml
+++ b/hieradata/common.yaml
@@ -51,6 +51,9 @@ roles:
     - tchaikovsky.debian.org
   nm:
     - nono.debian.org
+  packages:
+    - picconi.debian.org
+    - pkgmirror-1and1.debian.org
   packagesmaster:
     - picconi.debian.org
   packagesqamaster:

diff --git a/modules/roles/manifests/init.pp b/modules/roles/manifests/init.pp
index 0a5da93ff2d460d048793a2219f6757f728a461e..8d81dd113d9ee34062cd82f92d6fa610d249b947 100644 (file)
--- a/modules/roles/manifests/init.pp
+++ b/modules/roles/manifests/init.pp
@@ -167,4 +167,10 @@ class roles {
        if has_role('postgres_backup_server') {
                include postgres::backup_server
        }
+
+       if has_role('packages') {
+               ssl::service { 'packages.debian.org':
+                       notify => Service['apache2'],
+               }
+       }
 }