From: Peter Palfrader <peter@palfrader.org>
Date: Thu, 5 Nov 2015 18:55:40 +0000 (+0100)
Subject: maybe TLSA records for XMPP stuff
X-Git-Url: https://git.donarmstrong.com/?p=dsa-puppet.git;a=commitdiff_plain;h=2770088f3b3b54ca45a402e34b7f688b78c632e0;ds=sidebyside

maybe TLSA records for XMPP stuff
---

diff --git a/modules/roles/manifests/rtc.pp b/modules/roles/manifests/rtc.pp
index 75436704..04560759 100644
--- a/modules/roles/manifests/rtc.pp
+++ b/modules/roles/manifests/rtc.pp
@@ -6,6 +6,13 @@ class roles::rtc {
 	ssl::service { 'sip-ws.debian.org':
 	}
 
+	dnsextras::tlsa_record{ 'tlsa-xmpp':
+		zone     => 'debian.org',
+		certfile => "/etc/puppet/modules/ssl/files/servicecerts/www.debian.org.crt",
+		port     => [5061, 5222, 5269],
+		hostname => $::fqdn,
+	}
+
 	@ferm::rule { 'dsa-xmpp-client-ip4':
 		domain      => 'ip',
 		description => 'XMPP connections (client to server)',