Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

* 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet: (40 commits)
  somehow missed mayer
  fuck, really, stop
  stop including ferm for now
  apparently, puppet is not fond of sloppy line endings
  Revert "Revert "not breaking the paths in production branch maybe helps""
  try without extra whitespace
  Revert "not breaking the paths in production branch maybe helps"
  Revert "Revert "not breaking the paths in production branch maybe helps""
  Revert "not breaking the paths in production branch maybe helps"
  not breaking the paths in production branch maybe helps
  single quotes
  single quotes
  Revert "does that work?"
  does that work?
  Revert "maybe staging needs a default environment of staging?"
  the right path helps
  we lost two lines
  picky puppet
  ferm initial checkin
  Initial stab at adding a ferm module
  ...

Add barber, biber and orff

somehow missed mayer

Signed-off-by: Stephen Gran <steve@lobefin.net>

fuck, really, stop

Signed-off-by: Stephen Gran <steve@lobefin.net>

stop including ferm for now

Signed-off-by: Stephen Gran <steve@lobefin.net>

apparently, puppet is not fond of sloppy line endings

Signed-off-by: Stephen Gran <steve@lobefin.net>

Revert "Revert "not breaking the paths in production branch maybe helps""

This reverts commit 46f5d6d70547bd30ec7f802a0925eb3a78e001eb.

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

try without extra whitespace

Signed-off-by: Stephen Gran <steve@lobefin.net>

Revert "not breaking the paths in production branch maybe helps"

This reverts commit c26c232e2ea697b996e1c18c6f8e48d37d462f62.

Revert "Revert "not breaking the paths in production branch maybe helps""

This reverts commit ea394a00eaaaea35148a07825f21f253e696e7f9.

Revert "not breaking the paths in production branch maybe helps"

This reverts commit c26c232e2ea697b996e1c18c6f8e48d37d462f62.

not breaking the paths in production branch maybe helps

single quotes

single quotes

Revert "does that work?"

This reverts commit b89cc486588ff70b6876f0ea06e72fd82bb510d8.

Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet

does that work?

Revert "maybe staging needs a default environment of staging?"

This reverts commit 3f7679f15f1e85fbcf71422ace111168b01a9d03.

the right path helps

Signed-off-by: Stephen Gran <steve@lobefin.net>

we lost two lines

picky puppet

Merge branch 'ferm'

ferm initial checkin

Initial stab at adding a ferm module

WARNINGS:
* NOT TESTED (adapted from a livex, production system though)
* Has a default firewall policy that will lock you out

Plus, there are no users of ferm::rule{} yet, fairly pointless to add them
before getting an initial ack.

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>

maybe staging needs a default environment of staging?

Signed-off-by: Stephen Gran <steve@lobefin.net>

first stab at munin.conf template

Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' into staging

I like samosas

Signed-off-by: Stephen Gran <steve@lobefin.net>

add mayr to buildd puppet group

Signed-off-by: Stephen Gran <steve@lobefin.net>

add ball to buildd puppet group

Signed-off-by: Stephen Gran <steve@lobefin.net>

bad Ganneff.  ETOOMANYKEYS

Signed-off-by: Stephen Gran <steve@lobefin.net>

maybe fix Ganneff's key

Signed-off-by: Stephen Gran <steve@lobefin.net>

try to unfuck local keys a bit

Signed-off-by: Stephen Gran <steve@lobefin.net>

oh ruby, you should know what I mean

Signed-off-by: Stephen Gran <steve@lobefin.net>

add resolv class for grnet

Signed-off-by: Stephen Gran <steve@lobefin.net>

add grnet machines

Signed-off-by: Stephen Gran <steve@lobefin.net>

add grnet machines

Signed-off-by: Stephen Gran <steve@lobefin.net>

Ignore etc/lvm on zandonai

Merge branch 'master' into staging

Ignore qemu-kvm on some hosts

Remove obsolete comment

Move all per-host obsolete-packages-ignore.d-hostspecific files into the template

Move obsolete-packages-ignore.d/hostspecific to a template

Merge branch 'master' of git+ssh://zobel@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet

add zandonai.debian.org

Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet into staging

correct my SSH adm key

and you are out

Merge remote branch 'origin/staging' into staging

Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet into staging

raff cleanup

raff no more heavy_exim, but security mirror and mail routed via mailout

raff no more heavy_exim, but security mirror and mail routed via mailout

there is no wbadm on raff anymore

try a different template construct

Signed-off-by: Stephen Gran <steve@lobefin.net>

try a different template construct

Signed-off-by: Stephen Gran <steve@lobefin.net>

ignore resolv.conf when we serve it by puppet

Signed-off-by: Stephen Gran <steve@lobefin.net>

ignore resolv.conf when we serve it by puppet

Signed-off-by: Stephen Gran <steve@lobefin.net>

Revert "broken nameserver"

This reverts commit b56fe1a401d49d0e6b7c6a098c0eb1910b603bc5.

Revert "broken nameserver"

This reverts commit b56fe1a401d49d0e6b7c6a098c0eb1910b603bc5.

sperger is also manda

Signed-off-by: Stephen Gran <steve@lobefin.net>

sperger is also manda

Signed-off-by: Stephen Gran <steve@lobefin.net>

um, right nameserver helps

Signed-off-by: Stephen Gran <steve@lobefin.net>

um, right nameserver helps

Signed-off-by: Stephen Gran <steve@lobefin.net>

grr, syntax

Signed-off-by: Stephen Gran <steve@lobefin.net>

grr, syntax

Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' into staging

add ftc resolv.con

Signed-off-by: Stephen Gran <steve@lobefin.net>

make sure log dir is also correct ownership and permissions for exim

Signed-off-by: Stephen Gran <steve@lobefin.net>

broken nameserver

Signed-off-by: Stephen Gran <steve@lobefin.net>

add undef zone

add undef zone

Merge branch 'master' into staging

eureka!  scatter references to environments in enough places, and one of them will do something

Signed-off-by: Stephen Gran <steve@lobefin.net>

let's try this?

Signed-off-by: Stephen Gran <steve@lobefin.net>

try to make staging work, try 2

Signed-off-by: Stephen Gran <steve@lobefin.net>

try to make staging work

Signed-off-by: Stephen Gran <steve@lobefin.net>

mention where staging is

Signed-off-by: Stephen Gran <steve@lobefin.net>

add usual file disclaimer

Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet into staging

tell puppet that we have a staging branch

for staging, we have some different directories

ensure our tsig keys are protected

add ftp.d.o

Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet

make senfl and ravel new secondaries.... lets see what i break with it.

Create a volatile zone for geodns

Ignore geoip related newer packages on geo123

stop wasting time on responses that will never make it back

Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of git+ssh://zobel@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet

add global region entries for EU and AP

give all members of group security sudo access to the mail_security user.

Signed-off-by: Stephen Gran <steve@lobefin.net>

remove GeoIPv6.dat, as it is now in the package

Signed-off-by: Stephen Gran <steve@lobefin.net>

Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet

Update template

sil hoster range

Signed-off-by: Stephen Gran <steve@lobefin.net>

add mendes and monteverdi

Signed-off-by: Stephen Gran <steve@lobefin.net>

shuffle some service machines from relay clients to heavy_exim, as they can apparently do mail to the interwebs

Signed-off-by: Stephen Gran <steve@lobefin.net>

a bunch more machines to use mailout

Signed-off-by: Stephen Gran <steve@lobefin.net>