diff options
39 files changed, 1858 insertions, 1508 deletions
diff --git a/README.md b/README.md new file mode 100644 index 0000000..c7b0512 --- /dev/null +++ b/README.md @@ -0,0 +1,20 @@ +# CAcert Puppet + +This repository contains Puppet code (manifests, templates, files, configuration data) to configure the +[CAcert infrastructure systems](https://infradocs.cacert.org). + +The private key used to decrypt the Hiera data in [the hierdata subdirectory](hieradata) is stored on the +[Puppet server](https://infradocs.cacert.org/systems/puppet.html) in +`/etc/puppetlabs/code/environments/production/keys` + +All future infrastructure changes should be made via this repository. + +## Why Puppet? + +We use [Puppet](https://puppet.com/docs/puppet/6/puppet_index.html) with +[Hiera](https://puppet.com/docs/puppet/6/hiera.html) in combination with +[PuppetDB](https://puppet.com/docs/puppet/6/puppetdb_overview.html) to have a proper audit trail for changes to our +infrastructure systems. + +Alternatives like Ansible might be easier to learn, but do not provide the desired audit trail without more custom +tooling. diff --git a/hieradata/common.yaml b/hieradata/common.yaml index e18ffc8..10d1188 100644 --- a/hieradata/common.yaml +++ b/hieradata/common.yaml @@ -12,16 +12,13 @@ profiles::base::users: shell: /bin/zsh password: ENC[PKCS7,MIIB2gYJKoZIhvcNAQcDoIIByzCCAccCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAYmmeAt8w5DMzcB2T84r/s2mikksh1kxVFEG5Nk0o/jOh0BSdtKnEZLYV1SRa2Gvgu6ACqLAqYD+4c9neAnYcQrYL5y9rXC+l61bid3L83wM2XkBJYt534ZlU8XqjEB7R7wyQu+uVXA6PAqy9YccAJmAkDiIHy07yVoG8biG71IoCX7f40Otw28iXLU/N7xoX5ngGrWZaVDkQulwGxFAjD9KDwho9/pPXFEfqdeuJSuL3t3O3PEumvuva+qiZHO8Mb4Ngg8wDgHNFHXLjxohBGQ4e2RgrrcGWwFa+nSFRSukOecFv+WNzBbnNon7hiZ3QiFZoH9ooWIbfghWfZiWAezCBnAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBKgQQSYlfah+RAoUKmvuQGB79E4BwJDg6EL2YyQ1GWFxz2EYj9cjaVD4AhLUJqsgex5YozliQZCPcflv3VoegHTp2jJ742HbrRDZmE7ZNlsj7BswpOVtE1SO4Xqh4OJTmvLy4V2G2sac/usorrB5LwS+n55Fp/PTBHe3VD0R0Ywv24K6bYg==] ssh_keys: - - - name: default + - name: default type: ssh-rsa key: ENC[PKCS7,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] - - - name: edgepolster + - name: edgepolster type: ssh-rsa key: ENC[PKCS7,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] - - - name: nitrokey + - name: nitrokey type: ssh-rsa key: ENC[PKCS7,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] law: @@ -31,8 +28,7 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,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] ssh_keys: - - - name: default + - name: default type: ssh-rsa key: ENC[PKCS7,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] dirk: @@ -42,12 +38,10 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,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] ssh_keys: - - - name: default + - name: default type: ssh-ed25519 key: ENC[PKCS7,MIIBuQYJKoZIhvcNAQcDoIIBqjCCAaYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAsoFkNFm0h/EjewGZf4XGU/nSbP/m272G/QAukhpSDhROiYrRRnd41E/A9QlWcMNVQSmAhZldgOOuYbKv2+9b8TYeD41OR0UeIRpxBm5uJ4cUbgyXgmOs7y+huCA1crjVuU7noWUO4f2AHDGk/ENHL43myQLHCk/oqJsFzfIfQHI0/kGCSIxc8vwSOjIsjelKRAkZRCTR76FWX5VrOIp6dGZBy6sJjff6+qVIy1WQ532VwArvN9r5Y3IiydI4oHwhnsO/nDDE5wFDxkwS6iDk6YKuAGvSvgfifEX+S9OKU289WrosAFhQllUOA6+11hnYWPv6SwQwLyOE5SIf7T/h2jB8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAXYCaqIkeAtzRiRdlfZwiIgFB/3umOXRan6Fe7E/C99Wb1KWughyGhjkWkEu1/I93jNKg9Y4TuRhmvyRZtG9D7ZZm3G7h/4Y3dyFjNOgqmxzQhiuPQYm3tPqQk/OE+LVFQtQ==] - - - name: rsa4096 + - name: rsa4096 type: ssh-rsa key: ENC[PKCS7,MIIEPQYJKoZIhvcNAQcDoIIELjCCBCoCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAVVW+UX1MlJfQAu0EytjbPohPycgvDmzDMuxeTMnYxPVdVUPRIiT8zcWVBrym9ar+n01b3x/eAy8mjQF8n94xJDSvpWI/hLVDQJtDW+MrsMCnoAhcnVlb1E8cCH5b4Lflnk+JklcVxYFIxSurlqHrbKdWXAFw6DfniMsr64LyaYuRHun47RY/qfed9sLzwnqJQiZ8oGPbekTEJVbNDzvfopnCHzAdH+cYCI6y5IawTxZFQr8VAtaxvklbKOqaC4KtH2tOp/wYB+6IBYzQaqO+L2eM3+9p2flPtEERZ9Eq0Y9lDWRjkHXFKdOgXPjqRnqlKEcQ4cro+iX1dWUlAkV5ETCCAv4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEGRQx04BZuJ6kRvYwv1IRAiAggLQH24aFiONst/QRk2UM0nQDTEDwpT1I/n3e2Y4nHbT/HFDaiIT2176Lk8sG2WCNUkVGYcSrfiKGthM846Wp9C4xijQSxDtthcicDHOP0knv8hc1Cf1Z9tqLHBApJyj2yeGtaq6UoJMJSVXfTYCZczPxifJ/RHY9hHsWSBTclVLfhkCYrJo3GfFXnXFgWx7T052fldZ0cU7ywQ1NF7eB8c9CQyBSqZb1kDGfEESmOFGcRlf375llToRMkqcAQzlDxcedvDYfWLBCYg+5ztIlUY5OzpWFWvIkKLPeE1YwYzW+9THYRmIQcZ3j975/cwk2af+0hCRsm3dnXKrf/ocfMXr5hI3SAupsneSTt5mLdd7CJQwt5XEeKtPlT13hx5LIy7xbrnladTUIvRT84MA/FLwXEcxNzuaCcHeqs06vrLl5LM6N+DIwRkM1yXciHL2giTwvYqnTjeNv4yO2p7IF8Ilb3PjVvQbjHiEr8UGJJEKoMRJo7mWZKoZ13JSg7ICvG03QaFbvrFks3clGJFBlfJu2ihvuC0y3sixF3OV147ae7sb0OAvyMz4sagQjS5CTrq6kiQwL6m8VRXLYgANxEgABGc/aG73b1RcgDHiea3uRzqsN5oKr/P0HNFziX/WwD5YnfenyZhjHL69O22YwDo+UuJkh3XHLNkPBfT9/hNfza96JrV/n7vlloJMEphfH8BplUo4Na+FmUH6cn9vtucKkfTOQxzuBN++39a0xQ5pIaBDDyZbxnQ/3YpXv0IoQp0OgQs8kWsUsi2ejeVHdDxy7h9CaDpuvie9zETKIUMHXqFQt4HDfIUbsy6ksLyKCYPxSMAEUQyWH3YXQTCRqph817kphAP+sxSoWF07j38MwDohJjdBrWTGnwLwQb3mBD/eSq1m7hKj26cxaxMc7Z7QyH7k6uT0eYh605cdOOt5PrPctiDtoRnwyRDO+g18Acbn] wytze: @@ -57,8 +51,7 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,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] ssh_keys: - - - name: default + - name: default type: ecdsa-sha2-nistp521 key: ENC[PKCS7,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] mendel: @@ -68,8 +61,7 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,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] ssh_keys: - - - name: default + - name: default type: ssh-dss key: ENC[PKCS7,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] neo: @@ -79,8 +71,7 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,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] ssh_keys: - - - name: default + - name: default type: ssh-rsa key: ENC[PKCS7,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] ted: @@ -90,8 +81,7 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,MIIB2gYJKoZIhvcNAQcDoIIByzCCAccCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAv4pM3eYdyqCpT1Fcwttaut18uxHcBFY12HqlwhPQjyDLwTxxGL4axMSpwUd8iYu4yLJE8lxWfV8sHdA+TxTj1lTqGeo6qn6J1+H8rUrPXpXPL8/tWbDFWu3zUy8iTXIHwS66OY7j7AskiU0wAxOnp+cIr/LDt97bnZZ7yje0TJ6gImHdYkoizZy2uA7+5LZWFSReIZkbc7/Ros/A2wFnSnux4qkYpeuXvtj4whK8ZEK4qHsemlguhV2rcoE0ivqp3gVgQTGtnGhrrnVm/e+Ff8EQWGChKwFDrM6jXZFabfh3BXkt6TD+zYSPGnc4ttolj5ccvFV7jge26ry9VaeiszCBnAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBKgQQeXKtyksA7JksRwr7pbuVCYBwJO3u4YbZ39ATrXOngMeoCUu031QEZQjwWceakitb9cX52FBDnS30AwWks9Mge6YZObS5NT3Ma9cVnRJB0G5z8iBlZDXTaw1LfdJuCu71SWt1njAfaiJzXEqKvTcpGEqNuRxO02xfFlxo+PSC1L1mNw==] ssh_keys: - - - name: default + - name: default type: ssh-rsa key: ENC[PKCS7,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] gukk: @@ -101,8 +91,7 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,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] ssh_keys: - - - name: default + - name: default type: ssh-rsa key: ENC[PKCS7,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] jselzer: @@ -112,8 +101,7 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,MIIB2gYJKoZIhvcNAQcDoIIByzCCAccCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAPPRy8mgzFyevRBWlDPkbj5H2e8gRQymcr9sjb1iih1+GL/a2EgppsVw4AFLr8oeLymsrNdOTVprPWMa6PXx91sKOvmHUfJ10IqpzFgqb8ZbtSUSxdr2aNWUz4zvRuo9MGKEZ/puniUv+hy3bmYYn7RVzX4TVDZLOIvjfbSiTLr/BgWAC6ksNYhvK+JfEyRl3pQJvPA+Y3int0RZ4AGIAATr6rwOumEO/3j9R2qNNakga+dbCxJE0hEKm1Hb5o+vQiAZsrRBwtbh5vYceGP+JsUtuyIU9mUjOCmKzSFTh0SeedHwEUXHBBcAJ7pjtc9KJTDKxYLisGkOrSyxc3XotkTCBnAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBKgQQs5eQYV3U6FA9nSNBDObAq4BwpuEpMQlLLROR/wycfeQVsVTvo/eRZC9lbuw3Hax2a3bDt1Cy0uSipKzhrJaomeEIwwEi6NZHXA4hJcINRl4lE3YNs0Pvd99i3MmY5LPdA546cyi/tlr7zfA2GWV5hzxX0lzJM9mbJ/3pljzWcXP+Ew==] ssh_keys: - - - name: default + - name: default type: ssh-rsa key: ENC[PKCS7,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] markus: @@ -123,8 +111,7 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,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] ssh_keys: - - - name: default + - name: default type: ssh-rsa key: ENC[PKCS7,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] bpschuck: @@ -134,8 +121,7 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,MIIB2gYJKoZIhvcNAQcDoIIByzCCAccCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAa/0HvwkmraQVMB7rIaJUEH9uh2SCb+gUGFvVhUfdc8BQ2h82CXBc3TwAKJBav6UwzVHrGQuXjOmL/J17miIB8SDV7RYe7xMJbYoaeWUMCXO6jwUnYc4dRzNTc543LlUAmehXNJsnollbLh82GUIAGhsBJjxG18+OeZHFXlq29WR1OC0hRC5I4Jo6wKG06OidchIMtdLxUhzC5qr4YNLSXavC6mA1VjxEZhiXB5PiMoxgZOnQG215G1rVzIgXSKNVQJULk4hf54dtPrI9v1mSu8Ejoa3OIMLBmiFvRCQkWBtG3nKBqP1AtzEQGJq9q6HKigVjq/R6yGIHzdgAnngYMzCBnAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBKgQQ6XcRs1Gj9INpvO3crD7vzYBwfPDeuNLyFcYQbJDi33amxTJTQtYg54mnFmjyjmWUdZycMrxUhF1qfOI1PHcBj18TTpBWl5dgp4j0/X4k3dxPajGuWsJSdAAXzqUA3fnugA52maUsTc2s6VaCW/fltaG07+1mCKcgIfIEFDR8wEM8Cg==] ssh_keys: - - - name: default + - name: default type: ssh-ed25519 key: ENC[PKCS7,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] davevdm: @@ -145,8 +131,7 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,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] ssh_keys: - - - name: default + - name: default type: ssh-rsa key: ENC[PKCS7,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] dinoex: @@ -156,8 +141,7 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,MIIB2gYJKoZIhvcNAQcDoIIByzCCAccCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAbtFryYP7TOjfBp47lzKEc5awCVu/YS5peYCo01oS9H+U4xmto6vvxqo77IR/1Z4vnFgubSRCMY2BsSwq8t/wOdUv/uvnXPtG2JbyISfQVLXuwMuM0u8gNcDyAo+5HjVRYqIn+a7WaBLFcK0IO1uYcuKWaUz9McNxv/p5oLpZjA5TSqdyGIa9gUu9PrLw36hO5h1cEbLGeJh5Rv8bILRtv6f+b+X5bIOPhhbTm9WGpj4+6uHW8kHNsbM6sLFdLiEMxCD4RWHGGLqRUELeCe43qidaqDl4SSAbhoj5dZ0aBTPUzVeVss29I739OYF65YA7GRyT9KQvYe3EYYM32Q3+6TCBnAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBKgQQZ6KbScQmmPOguvNQNXMzEoBwiX/iswt0IoLmEVF2UJBn7QS9Z4XdvZLDUrhv7HeGGAssqkZsoGXNyllnv+3J/PxkNR4Jji/jjJC+rCuKzLTiVCB7tvo+a0EqWjVYi/qyEzb7kj+Abd3ZvQbaxF/FtaYQW+gfVutXHK22r9ELbiNUAQ==] ssh_keys: - - - name: default + - name: default type: ssh-ed25519 key: ENC[PKCS7,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] edkapite: @@ -167,8 +151,7 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,MIIB2gYJKoZIhvcNAQcDoIIByzCCAccCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAeW7DqxspLoev9Ny/GY92DO7hVf/Eur6QGRIwnOe+nu7JPdlPbkHF7iy+4m6hXgMgkxOgRZt2KE4pKVvgV6H4Tb89/X1L4oXGv5lzv748Ik8wX7OtL78rlNX2HvDNJrgi4Ho03d+W8VilIqoycMo5yvCcM9KP6K/FPitiQ8MePNBwBlaPAaW+j9obDojV5Yopxkpi2XDevs4VyZB1GEggVBJRxZ9SGSCGbAmmPEaK7RyXEcDabfmkBDa/VUtYrk0LgSKFL8jl59P6OQty8IikEcuYSLDInPo8ACEsGni7rSNXdTTocfJ4lhfBHijEJbHzLQZQZOTfxsJoIr2A/jzkIDCBnAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBKgQQSZUC6K+kUPgJCa8A7WH3G4Bw8luHM2y0AVUzwmE7JZfKCv0ZRdLWnkSgvX2RN6ToLTX2gncuQuhVEmok4fsmahodp1mfqeVbext8bggmu1eSLxA8XBwh72v1rVL7ttLaQGDl3VawkDgbh6gX7AzABjyMGP+uLAbeKoJ1IsEo9WIhbg==] ssh_keys: - - - name: default + - name: default type: ssh-rsa key: ENC[PKCS7,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] mish: @@ -178,8 +161,7 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,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] ssh_keys: - - - name: default + - name: default type: ssh-ed25519 key: ENC[PKCS7,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] sat: @@ -189,8 +171,7 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,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] ssh_keys: - - - name: default + - name: default type: ssh-ed25519 key: ENC[PKCS7,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] waclav: @@ -200,10 +181,19 @@ profiles::base::users: shell: /bin/bash password: ENC[PKCS7,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] ssh_keys: - - - name: default + - name: default type: ssh-rsa key: ENC[PKCS7,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] + kim: + username: kim + fullname: Kim Nilsson + uid: 1017 + shell: /bin/bash + password: ENC[PKCS7,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] + ssh_keys: + - name: default + type: ssh-rsa + key: ENC[PKCS7,MIIDrQYJKoZIhvcNAQcDoIIDnjCCA5oCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAARaQNN0Ob5c52Plwu964s7oaYVstGId7NGWbSbq7ztxOGsueozE5jUx779xrZ+Cwgqg8ciEsdQMc+3YwE8pJqsVwIUfNkmVLNzdXFcelfUG2AaHTCC54BdlHDid1N+yZA9iA1384s6S3/1b+utqwrOo80GK5RSM9n6vKx+RZc9gDw0hXgbIfGf3VUzB5I8jtGQy8ogqd0pBIJEjaEO3YmbfoKQ3ZhhoaQWs+EXdXX9QEp9azxtDQ2u7B8Uq++8PmURIkwJ/o1194IhBvxTYXOEMzxsFodsNGgnlkBHq3FNzV2TRi8CjllM1rORIXe9IqAZTUtD3VAP34BN6qqlndJDCCAm4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEIgmS7F3nZn/xQYI3ZPw/3KAggJANEs8cZnNr91lLtVs9/IkpDumtgBP8zWo/ftMDXI6ABwVsoqkkmSv8Brdkj/RFl9Ifmeb/kivucwkq/FB27IcgRLLbb281Bi/UjHl0JG8A127Rnu1duNwTPFohxrm+0g0GyNCxZOOHVpkpcpaOPxO3+sA+J4eV+/97V9na0n0kPJ1MbH72gGi5snQFZgIqHVbHSrHLGVtjZutfzvulLTMYR7upPkAyIWiLgMr2zlOlpP4+OS1HFLKrGs/bv6j7E02z8CfXRp8eUOWI/CNV4KrB1sJDCZoV4RUCaXbv3lLAaqLNyqaEx012p6jkwMsEKwk9ILavfT9Qt3mc5RDooN5KFMzca6GQS7wARgUcyAs6hqAg2Xi4bBdDVd7QOmKExUpXTjZfuEi6y3chmJCSZ3TBzZkjMNg+/xwUwl9hKj9+UJHvlKz3bvfCy6JlBrkoCVNN0ax2cHiP7btJ6LoSQKqLnj4d3Z+GNMN2ROVPVUSRUY3WPdONiJhJ0yi5eOmAPoqWL/9ncVoWWmGpMwQEd9cCydhxd5mhtLlZxN1UjCLlSCjVRv2lvW7xciaoufgoeBSSL4CHzuHHP9jNv48T0q3YwGEr7sZIHh5cud5dUYtZb3yzzqMPoY0jM/bBiX9teDGNQHbWW1Sj2CuFBEYHr6KQVtxsGehcRYV7lg5/OPB0Q61LKpUzmLw2Joi8AWYVCRqBa9ZNuUeongm999UtgVxyCfk9GCuDsOM6OPDbrdFvyUJ3CAavNSwpDOv7lt1NsGx] profiles::nrpe_agent::allowed_hosts: - 172.16.2.18 @@ -211,46 +201,46 @@ profiles::nrpe_agent::allowed_hosts: profiles::icinga2_agent::pki_api_user: client-pki-ticket profiles::icinga2_agent::pki_api_password: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAjrore6zK7GJXbP9FZ6ORUWvpt7FS2fXHiwB+ - ocTcmP7F8SnyCjYZ/a6S7eXPJVffZ6pZazozfUmW6HXOVFcSrZZdccEcZbFt - ZnQb9tp63BCHHGwqI/oj0jVdInaTXE1i4yQTjev/twzblmHIrEndfZnZzyAd - 61cnYuv8og5p5pccGYYoXBcPcguB9KtspfYL/eEwD4xNvqF/QlkAEXKZ5o39 - p9j24ao57Iwzy4o/dgI+MOr9NIMEtmXoIb3Ake3J7CaN26IuP22MTivFWf5p - 1vlMA69snYOifTKIw76eNACYCz+KA87dWDNEsR2OtCCbQ2EA1nrAXTdlYWdE - RmIpGTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAAs0An2QOnxac51GTU - gCG3gDAX0FOzW/oWi8c1PDIFb+0B4cTQRi9gP2fzugKu0bp0FBB7akZV6Zx0 - T5GP0WQAzU0=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAjrore6zK7GJXbP9FZ6ORUWvpt7FS2fXHiwB+ + ocTcmP7F8SnyCjYZ/a6S7eXPJVffZ6pZazozfUmW6HXOVFcSrZZdccEcZbFt + ZnQb9tp63BCHHGwqI/oj0jVdInaTXE1i4yQTjev/twzblmHIrEndfZnZzyAd + 61cnYuv8og5p5pccGYYoXBcPcguB9KtspfYL/eEwD4xNvqF/QlkAEXKZ5o39 + p9j24ao57Iwzy4o/dgI+MOr9NIMEtmXoIb3Ake3J7CaN26IuP22MTivFWf5p + 1vlMA69snYOifTKIw76eNACYCz+KA87dWDNEsR2OtCCbQ2EA1nrAXTdlYWdE + RmIpGTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAAs0An2QOnxac51GTU + gCG3gDAX0FOzW/oWi8c1PDIFb+0B4cTQRi9gP2fzugKu0bp0FBB7akZV6Zx0 + T5GP0WQAzU0=] profiles::icinga2_agent::master_host: monitor.infra.cacert.org profiles::icinga2_agent::master_certificate: | - -----BEGIN CERTIFICATE----- - MIIE+jCCAuKgAwIBAgIUakjWIH5VKmS7yZycSG7EzfIYWkswDQYJKoZIhvcNAQEL - BQAwFDESMBAGA1UEAwwJSWNpbmdhIENBMB4XDTE5MDcyMTE0MDYwMFoXDTM0MDcx - NzE0MDYwMFowIzEhMB8GA1UEAwwYbW9uaXRvci5pbmZyYS5jYWNlcnQub3JnMIIC - IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArjQIqs6zXncatT2luZImFAkx - XwUnApePQvxJ98cAyirNR6Ugh95syo9BP9PJvIojjxtuPK5FzZmLi3c5UO3ly72Q - Yxho/yZ/qLllmluhreiMAcofDdwyo9X9kAfexjeztopdY2flBT7LpQ7txuOgK91p - WmI2uH5Htjwtbumh4E2UO9NkenFpNpUVg58mBNZpnNDApYacj2zz1v2WBFgaM1/3 - UABD+HicNd/aS1ji6eMOglgq5arYrfKZxpe2GgVZ50xfvWrIfg/C7HvU+GyghS7f - XgpyzjLQoR9gS4aAPIvb45hG4p2u3Fx14PR3IynYtaZV3KSh5RNKBkQSlu9hmVRS - y8aR5DqneDmTVX944lvlr1+x8+Xy37DZH9+6Bq0mBrnnlEc5y7ybcreuUm1Vx30l - /iZfnt8uwC1SyB2J3ZbtXK9vIPHG097rLl0l+Rw8eaObaWl8rn4PVjdAUaFI+q2B - hep8b4gfyF393Ih54OTYCI5QyEbBPP7syTCSgrWDUUnLv/ar2AvXTfzzydqmcKsz - Yliok3iZfjf61TETTpBjqkKHTpS+mE55L2DSS0R1X0JTbjwmkvANYQ80emKk49Xa - k7IqYJYT8+h2wDYambcTR+rhBV7c6QBS+phCPqO+7miYdyDeZCvPtQcO3lxMEnVv - y2nh6+8BvEveNfdTNOUCAwEAAaM1MDMwDAYDVR0TAQH/BAIwADAjBgNVHREEHDAa - ghhtb25pdG9yLmluZnJhLmNhY2VydC5vcmcwDQYJKoZIhvcNAQELBQADggIBADGz - W4rXl1xK5qNHRWVy6wqH8/2OkZCg1O8X1b3mEnYYXyXRB8L6OKDUDfNZaldACegT - aEmEzBL27+/7wW6SymWoL74ni9WOZPqJ3GsWtHDUWSsolvQWHmYFnIGTOm+8PsVw - L3X2ftPg1krXhTWevK4rZdLNh4KM4Gr6nFHxiuxiOV22xqLSaFh/rVd0TNlpgCIZ - oWOsKYrqx4Hudq4blDI0w0NLySgOVEgl1EJA/vED1DzOFmbmuvujODUhjm5sVvuN - x9Zm4G0KuZX7LgKc6VeGnAyAUzgrD/uhZvc3oAzmfUUC3dx7tWB7WUuI9ji9bL8v - 94oXsQ7Ig329RdSsE3AoH6w54cVgCEo3WZ7j7z+ejPPLI9DbvFFwM/JFEO+A1cPw - EEUG8bSHHo8Twe5tgTwr0t1Sch3D5Ur7qv0nBAjwphEVoIGiu5yudmFbscPgTz+i - /NPtJ1zZ2NCjLabeXmaSq8Zxy4dCJ0YJ6fuFz2SKd92RDO4okhDbRgnW1RT1+eAT - 2dNvOd3V878PS7BM3OAzZTfVnVD+/DTRyUHAz07iSB/1KNfEfn3qDSTapx9PL4aJ - X74w5WZ7FlNdQHRFvvjNI849fVb2MoLxeIwd7W5flv6gpLlMX49PMp62ZtfupbRJ - 5AtYgSC6FbF3WwkRKTz2/KZi5j0oCHqxl31HY1Hx - -----END CERTIFICATE----- + -----BEGIN CERTIFICATE----- + MIIE+jCCAuKgAwIBAgIUakjWIH5VKmS7yZycSG7EzfIYWkswDQYJKoZIhvcNAQEL + BQAwFDESMBAGA1UEAwwJSWNpbmdhIENBMB4XDTE5MDcyMTE0MDYwMFoXDTM0MDcx + NzE0MDYwMFowIzEhMB8GA1UEAwwYbW9uaXRvci5pbmZyYS5jYWNlcnQub3JnMIIC + IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArjQIqs6zXncatT2luZImFAkx + XwUnApePQvxJ98cAyirNR6Ugh95syo9BP9PJvIojjxtuPK5FzZmLi3c5UO3ly72Q + Yxho/yZ/qLllmluhreiMAcofDdwyo9X9kAfexjeztopdY2flBT7LpQ7txuOgK91p + WmI2uH5Htjwtbumh4E2UO9NkenFpNpUVg58mBNZpnNDApYacj2zz1v2WBFgaM1/3 + UABD+HicNd/aS1ji6eMOglgq5arYrfKZxpe2GgVZ50xfvWrIfg/C7HvU+GyghS7f + XgpyzjLQoR9gS4aAPIvb45hG4p2u3Fx14PR3IynYtaZV3KSh5RNKBkQSlu9hmVRS + y8aR5DqneDmTVX944lvlr1+x8+Xy37DZH9+6Bq0mBrnnlEc5y7ybcreuUm1Vx30l + /iZfnt8uwC1SyB2J3ZbtXK9vIPHG097rLl0l+Rw8eaObaWl8rn4PVjdAUaFI+q2B + hep8b4gfyF393Ih54OTYCI5QyEbBPP7syTCSgrWDUUnLv/ar2AvXTfzzydqmcKsz + Yliok3iZfjf61TETTpBjqkKHTpS+mE55L2DSS0R1X0JTbjwmkvANYQ80emKk49Xa + k7IqYJYT8+h2wDYambcTR+rhBV7c6QBS+phCPqO+7miYdyDeZCvPtQcO3lxMEnVv + y2nh6+8BvEveNfdTNOUCAwEAAaM1MDMwDAYDVR0TAQH/BAIwADAjBgNVHREEHDAa + ghhtb25pdG9yLmluZnJhLmNhY2VydC5vcmcwDQYJKoZIhvcNAQELBQADggIBADGz + W4rXl1xK5qNHRWVy6wqH8/2OkZCg1O8X1b3mEnYYXyXRB8L6OKDUDfNZaldACegT + aEmEzBL27+/7wW6SymWoL74ni9WOZPqJ3GsWtHDUWSsolvQWHmYFnIGTOm+8PsVw + L3X2ftPg1krXhTWevK4rZdLNh4KM4Gr6nFHxiuxiOV22xqLSaFh/rVd0TNlpgCIZ + oWOsKYrqx4Hudq4blDI0w0NLySgOVEgl1EJA/vED1DzOFmbmuvujODUhjm5sVvuN + x9Zm4G0KuZX7LgKc6VeGnAyAUzgrD/uhZvc3oAzmfUUC3dx7tWB7WUuI9ji9bL8v + 94oXsQ7Ig329RdSsE3AoH6w54cVgCEo3WZ7j7z+ejPPLI9DbvFFwM/JFEO+A1cPw + EEUG8bSHHo8Twe5tgTwr0t1Sch3D5Ur7qv0nBAjwphEVoIGiu5yudmFbscPgTz+i + /NPtJ1zZ2NCjLabeXmaSq8Zxy4dCJ0YJ6fuFz2SKd92RDO4okhDbRgnW1RT1+eAT + 2dNvOd3V878PS7BM3OAzZTfVnVD+/DTRyUHAz07iSB/1KNfEfn3qDSTapx9PL4aJ + X74w5WZ7FlNdQHRFvvjNI849fVb2MoLxeIwd7W5flv6gpLlMX49PMp62ZtfupbRJ + 5AtYgSC6FbF3WwkRKTz2/KZi5j0oCHqxl31HY1Hx + -----END CERTIFICATE----- profiles::lxc_host::dns_forward_servers: - 10.0.0.1 diff --git a/hieradata/nodes/authserver.yaml b/hieradata/nodes/authserver.yaml new file mode 100644 index 0000000..3cba665 --- /dev/null +++ b/hieradata/nodes/authserver.yaml @@ -0,0 +1,16 @@ +--- +classes: + - roles::authserver +profiles::base::admins: + - jandd +profiles::icinga2_agent::pki_ticket: > + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBAD + AFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAMuwyVWL3VEdgAS5HvM+RltOUGC + hPe27Eahu1zUxp7f48aJ/VOsmgHm8F1YftyC1AndzrJ8T84Lm6Ur/NZ2RkoV + ZUhEGf6r2eYb51NejOwCaZOvVODXfl0dqhUloU3Ro1PtH8uAsaYdouYdpnqD + bIjDpornfsT4T7djqYOfchUbXM7A3u7pPRpukpUHFiPeAb/nRHvKH/xJvWXG + 7BzehEJNGERQ5DERTJ83Y4yjZ3V4mtTbMk5GpZ3SgHtui5XigCSJoeyhcX5o + Z/zBH1fRe7iO0f1QCIR1gZEB4T54KXGFy4WXEUuulBO8h0BdkM2aGQ+Cgw0X + L0YPzwDKzt4kSl4DBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDIBlhjSM + DvwLO0SRosvFN9gDD+lGsBsFLvo8ll60Nl5FxYEW160kr+PTvxBCu/2R435b + IRkWxuqR7qkTpqnVizUao=] diff --git a/hieradata/nodes/blog.yaml b/hieradata/nodes/blog.yaml index 6eb0a29..5cf35cd 100644 --- a/hieradata/nodes/blog.yaml +++ b/hieradata/nodes/blog.yaml @@ -6,16 +6,16 @@ profiles::base::admins: - jandd - law profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAQsBoiVwx9vmrYDxh7YuvesnlK8zu9EZ51RIV - RbGlw6iUQa+93uIv4v8dsdBTuRzaMs9TDm+zYtg8rjv+yvBxXNLTvPGywQLk - QmnN285KQZxLYjEMYIhskEmqYiCRa3yizJsHPHdnDfo+ddkeOBA6ggfeV+q6 - nTKO4E3xhqzhf9nM1dH7wmEtQGwUf1w19DCuXZJF6Umy6RqqR+TWJEyqLzdv - /PLmK3uOzfEwqTbiD1kr83suFyksAeePQdgIzHRz+sCOdr866YpSHSUdJZgc - ytNY054jmupwdqTfg/jYYtNWWToHbnyUBQuVMPVlNB3o2uDecSRkcRaQbyih - 1PvtizBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAVe9rr+qrIzyMWNoyH - rzk3gDAzQ3tgLcEabWZfImVtWIACq224h2PaVx/1YkZAVUH7YRbcvL81JJfJ - wfhG6SBWM8U=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAQsBoiVwx9vmrYDxh7YuvesnlK8zu9EZ51RIV + RbGlw6iUQa+93uIv4v8dsdBTuRzaMs9TDm+zYtg8rjv+yvBxXNLTvPGywQLk + QmnN285KQZxLYjEMYIhskEmqYiCRa3yizJsHPHdnDfo+ddkeOBA6ggfeV+q6 + nTKO4E3xhqzhf9nM1dH7wmEtQGwUf1w19DCuXZJF6Umy6RqqR+TWJEyqLzdv + /PLmK3uOzfEwqTbiD1kr83suFyksAeePQdgIzHRz+sCOdr866YpSHSUdJZgc + ytNY054jmupwdqTfg/jYYtNWWToHbnyUBQuVMPVlNB3o2uDecSRkcRaQbyih + 1PvtizBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAVe9rr+qrIzyMWNoyH + rzk3gDAzQ3tgLcEabWZfImVtWIACq224h2PaVx/1YkZAVUH7YRbcvL81JJfJ + wfhG6SBWM8U=] profiles::x509cert_common::certificates: 'blog.cacert.org': certificate: | diff --git a/hieradata/nodes/bugs.yaml b/hieradata/nodes/bugs.yaml index dac97c3..b5205af 100644 --- a/hieradata/nodes/bugs.yaml +++ b/hieradata/nodes/bugs.yaml @@ -6,16 +6,16 @@ profiles::base::admins: - jandd - law profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAcX6SwwACEzRwZbnDX9rUu2l1xWF3jJVi6Fon - ZtUAkQs4w4GMdom+Ze2WsXpq623WD60csytV0PF6BvLPoBMec6f2kj2ZsbBz - SzJ2/1QfpkG0qh+DS7MXN1wSBrJd2ERk99V792GAFHzq8juCbI+LdFJlv1/8 - PAehHgIqPTYRpkVdMX3QXbR6ulukgaKQ3rV3LUD9WeP3BHhGSPBOy/E278KH - q5hXFeFgfBMiImPIdKeQn3aAwTVgAUArnhRR3dQLnL2pT+8qu9fca1Hhla/e - Sn0m7FBbO344esxXgIzU4OAQOtcy28hdlBBDSW9bDW+IfTxIoxSHNNbM+X9l - uOSdpDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBNp7E65UObjdMpvSNL - cL0JgDDj8oGEHS/6EmlFUeFwv7h+2wC8/DEq6JwSysRtnP/tM2/KZ/e1rVeu - K0oC5LKZf1I=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAcX6SwwACEzRwZbnDX9rUu2l1xWF3jJVi6Fon + ZtUAkQs4w4GMdom+Ze2WsXpq623WD60csytV0PF6BvLPoBMec6f2kj2ZsbBz + SzJ2/1QfpkG0qh+DS7MXN1wSBrJd2ERk99V792GAFHzq8juCbI+LdFJlv1/8 + PAehHgIqPTYRpkVdMX3QXbR6ulukgaKQ3rV3LUD9WeP3BHhGSPBOy/E278KH + q5hXFeFgfBMiImPIdKeQn3aAwTVgAUArnhRR3dQLnL2pT+8qu9fca1Hhla/e + Sn0m7FBbO344esxXgIzU4OAQOtcy28hdlBBDSW9bDW+IfTxIoxSHNNbM+X9l + uOSdpDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBNp7E65UObjdMpvSNL + cL0JgDDj8oGEHS/6EmlFUeFwv7h+2wC8/DEq6JwSysRtnP/tM2/KZ/e1rVeu + K0oC5LKZf1I=] profiles::x509cert_common::certificates: 'bugs.cacert.org': certificate: | diff --git a/hieradata/nodes/code.yaml b/hieradata/nodes/code.yaml index 9a66656..8cd41e4 100644 --- a/hieradata/nodes/code.yaml +++ b/hieradata/nodes/code.yaml @@ -4,27 +4,27 @@ classes: profiles::base::admins: - jandd profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAoMdZhzR3jM//UzdXm+QgMu6B5vTRbXq9uEgB - JG4UzGaARRdOVSWDr0YIJeRwA92CQRygUAcbA8kw+XJxUD7UM2q9tQnRkkzp - 9ad+s40TPFrEtgwepWW/rE+ikzxKlic2MMcvreQcvhuQAYnqQa7/KPjXf5GW - W4gknLbfn09mF/dlVM4vDEyAbEAdDpf/8UnbFJLE/EG/dKDbbb+8l/6C2On+ - BGXrME6GUDn2gigCD3+35zL0+VxNXx6A5hagCbLu7sIifQHNn4mP+ObMGj0Q - 3wx8BH4IxS02tqpmQDB9EQNrUeb3y6vj8086ePRn/NTmPC0jNP+I02KLjXsV - MUwAcTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBD631O2gRFwtbgb07le - VlHOgDC6DqTry9yMR/tY73SZ/vNpwQbNNpb1QgSgNY/Xput/Rby+NuJTXkzQ - AafGS1+vajg=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAoMdZhzR3jM//UzdXm+QgMu6B5vTRbXq9uEgB + JG4UzGaARRdOVSWDr0YIJeRwA92CQRygUAcbA8kw+XJxUD7UM2q9tQnRkkzp + 9ad+s40TPFrEtgwepWW/rE+ikzxKlic2MMcvreQcvhuQAYnqQa7/KPjXf5GW + W4gknLbfn09mF/dlVM4vDEyAbEAdDpf/8UnbFJLE/EG/dKDbbb+8l/6C2On+ + BGXrME6GUDn2gigCD3+35zL0+VxNXx6A5hagCbLu7sIifQHNn4mP+ObMGj0Q + 3wx8BH4IxS02tqpmQDB9EQNrUeb3y6vj8086ePRn/NTmPC0jNP+I02KLjXsV + MUwAcTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBD631O2gRFwtbgb07le + VlHOgDC6DqTry9yMR/tY73SZ/vNpwQbNNpb1QgSgNY/Xput/Rby+NuJTXkzQ + AafGS1+vajg=] profiles::gitea::database_password: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEABIkX+98o3ENPVjgdKapXDgK+YIkG8LrCB1JZ - zB4dAFLE3Q/DHl6v3pZ2VLU/F2urpk1kgclgz5wyKJkWSJp3LtRpFzc5emlY - 4bnTc4JLODQV20IWRvnc7U4fcAjnYfqflc+cmRooptZYEvR0sz3Zejj3zA7h - irH5XJvrPinJvKRD8LaSaH1kDSX+gGRXbm6JLH/tsu0ZsmVjJFGfTGmcvjhn - nCU+vAwv6iv5JxbOX75V085OlnZEJJbZK7EuUck9qFSU6RSB7Ui5480i5Kq3 - lbuDK19nak+VemMXorhg+f+MIYnb2Wmf+EOvuMuuiQHaJBBdPGeOlZA0UO5I - 1+iZNTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAppQlAjbnsuArVa3CI - BqXcgDDiZCLodsKzhP1PKv2vmDdl0HrnWRz41QxrjHE2gJKX4oAFU4wpi3lE - DK06TozeLsg=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEABIkX+98o3ENPVjgdKapXDgK+YIkG8LrCB1JZ + zB4dAFLE3Q/DHl6v3pZ2VLU/F2urpk1kgclgz5wyKJkWSJp3LtRpFzc5emlY + 4bnTc4JLODQV20IWRvnc7U4fcAjnYfqflc+cmRooptZYEvR0sz3Zejj3zA7h + irH5XJvrPinJvKRD8LaSaH1kDSX+gGRXbm6JLH/tsu0ZsmVjJFGfTGmcvjhn + nCU+vAwv6iv5JxbOX75V085OlnZEJJbZK7EuUck9qFSU6RSB7Ui5480i5Kq3 + lbuDK19nak+VemMXorhg+f+MIYnb2Wmf+EOvuMuuiQHaJBBdPGeOlZA0UO5I + 1+iZNTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAppQlAjbnsuArVa3CI + BqXcgDDiZCLodsKzhP1PKv2vmDdl0HrnWRz41QxrjHE2gJKX4oAFU4wpi3lE + DK06TozeLsg=] profiles::x509cert_common::certificates: 'code.cacert.org': certificate: | diff --git a/hieradata/nodes/community.yaml b/hieradata/nodes/community.yaml index ad992f9..1f18b4c 100644 --- a/hieradata/nodes/community.yaml +++ b/hieradata/nodes/community.yaml @@ -7,37 +7,37 @@ profiles::base::admins: - jselzer - dirk profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEARHUYarivf3GhHB+uKLA9AD0uCJJqBJjzt3+N - wreJZ79ehkkb1LIU720ipwRPTtP+a6Gjx1rfQJO8YwB1ZwDeB7aYc+1ZHcVF - kAHOu5WkonpGCDMHfTJu3NUAa1O9qla8W4cdyLh/n7wJS3hqFJrDa0SxdlLN - xvsqxNtrEjWa9ADiC+Tbt6IWGkLKZrs/T0C3zPMUc3lTXSyWDDFPPaAUj1Sk - 9OhOw00j+3BcYSIb0J8h92dNohLS5saGXMf+mwqt2FZWDyJ8YbzJCItmhhMH - S/Bmsc4dsT5VPgFew/5FOrR5/8whEu9gUFcP8FbLGEXtClUylWhAf6aK6cxM - 2Yt+/jBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBv/L7t0DBN3lDygcWV - AAa/gDAEkxZMiQL9ZuZ6KaLVzv3FNr+ACIvytNoi9JxLTX/PTpygEmRb35Fq - xS+ioIVEWOE=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEARHUYarivf3GhHB+uKLA9AD0uCJJqBJjzt3+N + wreJZ79ehkkb1LIU720ipwRPTtP+a6Gjx1rfQJO8YwB1ZwDeB7aYc+1ZHcVF + kAHOu5WkonpGCDMHfTJu3NUAa1O9qla8W4cdyLh/n7wJS3hqFJrDa0SxdlLN + xvsqxNtrEjWa9ADiC+Tbt6IWGkLKZrs/T0C3zPMUc3lTXSyWDDFPPaAUj1Sk + 9OhOw00j+3BcYSIb0J8h92dNohLS5saGXMf+mwqt2FZWDyJ8YbzJCItmhhMH + S/Bmsc4dsT5VPgFew/5FOrR5/8whEu9gUFcP8FbLGEXtClUylWhAf6aK6cxM + 2Yt+/jBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBv/L7t0DBN3lDygcWV + AAa/gDAEkxZMiQL9ZuZ6KaLVzv3FNr+ACIvytNoi9JxLTX/PTpygEmRb35Fq + xS+ioIVEWOE=] profiles::roundcube::des_key: > - ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAqwu823+svisLj+8LxOGHbb05s1tIFsraXWH/ - SDnuK8//+6q37kjoAvySC9uCbaRpB9dWfU9E46BUVAYg703LC/JMEeS5UfXK - v/44BFSGlzXjbQkM0tdfNY2DCk3AWcPAds+6SfReS3vBqXt1l3Sas5hSm17t - 1zkELEsacMQ/+5a7MNWSUVfJbA51rdQUmrP88Pu+CfzlqduupNJVvgzI6xUz - C29+DJ866sevd90ByCtRgLzCkGVe5GFYjXi3VOHUF3yRmsmoHtP+bTsxmN42 - +oU91+xXa0LzSp/dCt9LYMpUi1WXl4k8AXU6AqZMo7uYJvHH0p79ugYP4Xkr - fAE/ADBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAnr12/n/QLzDyVRxaW - DaGygCDPJqWrEVXRR79E5Uu+jqPezAEMdYrzSCJDYFiS2cRgUQ==] + ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAqwu823+svisLj+8LxOGHbb05s1tIFsraXWH/ + SDnuK8//+6q37kjoAvySC9uCbaRpB9dWfU9E46BUVAYg703LC/JMEeS5UfXK + v/44BFSGlzXjbQkM0tdfNY2DCk3AWcPAds+6SfReS3vBqXt1l3Sas5hSm17t + 1zkELEsacMQ/+5a7MNWSUVfJbA51rdQUmrP88Pu+CfzlqduupNJVvgzI6xUz + C29+DJ866sevd90ByCtRgLzCkGVe5GFYjXi3VOHUF3yRmsmoHtP+bTsxmN42 + +oU91+xXa0LzSp/dCt9LYMpUi1WXl4k8AXU6AqZMo7uYJvHH0p79ugYP4Xkr + fAE/ADBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAnr12/n/QLzDyVRxaW + DaGygCDPJqWrEVXRR79E5Uu+jqPezAEMdYrzSCJDYFiS2cRgUQ==] profiles::roundcube::master_password: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAQym6DCbBEdEaW6q4f4fKNhVt9iCdn8butbqV - I3F5Br2b+68R/llQfA0MCBIKPWaF2vwUaUaJYow6uQ9KE96FLASVPCia0Tq7 - eKkvZOJ6AXCFhU2fj7IWdzmFGBHlU5j39OhRuk5k/vwn9dtn2korYhUfkhdd - 93htnI7ts3uu13fsDqg8fKG8GGuRiesvOfcLgmR6N13S+INMnmm1yogzt/H8 - dP9Gmzh06H8LPLo09xkv7/VhqyyjGHFuqnpzEpEIiaI6yfpP2o0XxFVtIJ3d - kieIXuWP6Cn30EhfTtJ4+MuS/r/jjLTjvuuy+FH4J3Jw6ruTQpWGkszHCKKZ - qukXDDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBA45dXYksd5BAhgFD7 - 5NP+gDDvF8Cgnhpi/DhvI0fzwYJaLwelYhplqcWXJhml/58/yhYllUZVE/Cz - smDHq+RA9UI=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAQym6DCbBEdEaW6q4f4fKNhVt9iCdn8butbqV + I3F5Br2b+68R/llQfA0MCBIKPWaF2vwUaUaJYow6uQ9KE96FLASVPCia0Tq7 + eKkvZOJ6AXCFhU2fj7IWdzmFGBHlU5j39OhRuk5k/vwn9dtn2korYhUfkhdd + 93htnI7ts3uu13fsDqg8fKG8GGuRiesvOfcLgmR6N13S+INMnmm1yogzt/H8 + dP9Gmzh06H8LPLo09xkv7/VhqyyjGHFuqnpzEpEIiaI6yfpP2o0XxFVtIJ3d + kieIXuWP6Cn30EhfTtJ4+MuS/r/jjLTjvuuy+FH4J3Jw6ruTQpWGkszHCKKZ + qukXDDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBA45dXYksd5BAhgFD7 + 5NP+gDDvF8Cgnhpi/DhvI0fzwYJaLwelYhplqcWXJhml/58/yhYllUZVE/Cz + smDHq+RA9UI=] profiles::cacert_selfservice::admin_emails: - jselzer@cacert.org - jandd@cacert.org @@ -45,187 +45,187 @@ profiles::cacert_selfservice::admin_emails: profiles::cacert_selfservice::api_endpoint_url: https://email.infra.cacert.org:9443/ profiles::cacert_selfservice::api_client_id: cac3ad11-fa50-43f6-8ded-15f598b6ca2a profiles::cacert_selfservice::api_private_key: > - ENC[PKCS7,MIICXAYJKoZIhvcNAQcDoIICTTCCAkkCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAwZixb5ZkBTfIjHnZjyg+bDOCsJZ46ATcle1j - imfj5hph1wBK4ZpjuzLew1IPTJ+iY4redgwNGi0TgHcOmT9l2i2jnjITDKJt - 7vfgLFKZJ8+whdEpejd8GVBXBgNe4vIt2YMMRnOGl7d9dS7+e4sm0lK56hSd - fbHuu7h0gbSK+ZPbJvyPPI+r90j/qRq8SXrnJ8nT49NswHuj5PmMBdYMslSO - PpnAoq+YyukeQ+HagWr3khcSZx+GYY14kBpBNiDZpG03NKzjZkT6fYugqHE0 - B9HC22XSKrwQJwIIbSpVRJ3UF2pcx0aWjMQfuvdteJyD9XkmeNa6uiQGl05G - KJuqhDCCAR0GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEOsT67vXcPF/Pbqc - j6x76aOAgfBjd1srdGK6PJUs5Inkop441ce2v3jij/1oo9fRswSTgAMGHSGg - 4zqbuZH2eR9hUXd/Mn8DmrAF4O285K7J6ei+9Eqkyf4xoIGV0VT9OiXDbJ6K - mUdm0gPYWdjYnN6FEIo2sLxBf6NDyRXFnjALnY6hfS8ePD4vRLHld3gDErdA - QwVQDewb+L5H3mrTNnM/2ex9M1ekRXK3z0lfn4q1H7UUZLS6Y5vmH4Tl7kTk - QeVCvUatI5fSzNaAi+N15nMo2X/ojgTn/CS9zklA5du1XgI1xzqsHyb7zirv - Bq5sNCy9CM2at4UMKVqsU7FpdIIxjFw=] + ENC[PKCS7,MIICXAYJKoZIhvcNAQcDoIICTTCCAkkCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAwZixb5ZkBTfIjHnZjyg+bDOCsJZ46ATcle1j + imfj5hph1wBK4ZpjuzLew1IPTJ+iY4redgwNGi0TgHcOmT9l2i2jnjITDKJt + 7vfgLFKZJ8+whdEpejd8GVBXBgNe4vIt2YMMRnOGl7d9dS7+e4sm0lK56hSd + fbHuu7h0gbSK+ZPbJvyPPI+r90j/qRq8SXrnJ8nT49NswHuj5PmMBdYMslSO + PpnAoq+YyukeQ+HagWr3khcSZx+GYY14kBpBNiDZpG03NKzjZkT6fYugqHE0 + B9HC22XSKrwQJwIIbSpVRJ3UF2pcx0aWjMQfuvdteJyD9XkmeNa6uiQGl05G + KJuqhDCCAR0GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEOsT67vXcPF/Pbqc + j6x76aOAgfBjd1srdGK6PJUs5Inkop441ce2v3jij/1oo9fRswSTgAMGHSGg + 4zqbuZH2eR9hUXd/Mn8DmrAF4O285K7J6ei+9Eqkyf4xoIGV0VT9OiXDbJ6K + mUdm0gPYWdjYnN6FEIo2sLxBf6NDyRXFnjALnY6hfS8ePD4vRLHld3gDErdA + QwVQDewb+L5H3mrTNnM/2ex9M1ekRXK3z0lfn4q1H7UUZLS6Y5vmH4Tl7kTk + QeVCvUatI5fSzNaAi+N15nMo2X/ojgTn/CS9zklA5du1XgI1xzqsHyb7zirv + Bq5sNCy9CM2at4UMKVqsU7FpdIIxjFw=] profiles::cacert_selfservice::base_url: https://selfservice.cacert.org/ profiles::cacert_selfservice::cookie_secret: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEANEuaG5H4qNkySuid+UUP7aurU5shEpoV+Aei - ChIT8OzQA9v6NpOaz9UvorSrebLI7MZ3N9WOT54tEppjdesooX270wq+xi/k - IEzP/3IU72GQCfpDyanTRO5mDSkWMUTySbE2b2lIelDTM/r6V70EZTLcLxvb - 96HtiZ3keAfVlXPpM8B8FKbVHBhnPkMOgy2gs0lqc9FXBAlAUdCirgH9X/Y9 - HC3SjiZrKUDdWHRS5p0a/b1e1GNGEn9RyFaJaS4tAvTgBbM5nJtWgw/jniRq - qABbA6dB6kMvyMNVTmcGCT3TvgqD0CnmjwH1KeiS26SGfB6EMlSzT0s1Lf4V - jvBrrDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAxi4Yrk00u8lUnFF9C - jzdVgDCAXKS3fskZkAIHmTnoK3bWVEdvaeiA65LyuzOTArxhinWKqdD9cgBc - 5D6njEaLuT4=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEANEuaG5H4qNkySuid+UUP7aurU5shEpoV+Aei + ChIT8OzQA9v6NpOaz9UvorSrebLI7MZ3N9WOT54tEppjdesooX270wq+xi/k + IEzP/3IU72GQCfpDyanTRO5mDSkWMUTySbE2b2lIelDTM/r6V70EZTLcLxvb + 96HtiZ3keAfVlXPpM8B8FKbVHBhnPkMOgy2gs0lqc9FXBAlAUdCirgH9X/Y9 + HC3SjiZrKUDdWHRS5p0a/b1e1GNGEn9RyFaJaS4tAvTgBbM5nJtWgw/jniRq + qABbA6dB6kMvyMNVTmcGCT3TvgqD0CnmjwH1KeiS26SGfB6EMlSzT0s1Lf4V + jvBrrDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAxi4Yrk00u8lUnFF9C + jzdVgDCAXKS3fskZkAIHmTnoK3bWVEdvaeiA65LyuzOTArxhinWKqdD9cgBc + 5D6njEaLuT4=] profiles::cacert_selfservice::csrf_key: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAb3LeVK/doYxs7FwFIbvp21i6M27fmSXtIK3E - p36brmcQCjnbCeLpHkE2FroYZJQmtNY9EGGUzkQsyoBDicK3j3w754LGMDgn - s3PL+hDk16X45yBFgcnTS/C3jFbm3SklFsNfpLGEEbCjwlTyL9txnQfU6zw8 - +xHOrpSiSRM5hAA5/i2vEgErZlh9kVqKoXNJdj2X2oIjW8vw37rlPO6w4iIy - 3fTHtCFsfKqaa7QmsBuXrK6IDKMVsTPr+daav/8YwacVuptnzr+pFww/u3pb - +B/ES8qGRen7ibaZcoxBmxmUNtPSpuqsyHBnyVVJQO3c9ZQzLq+wRJYkKK+k - j+0DMTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCbhyOCOabOgrKCo5Jw - s5cUgDCvQ0SCr1BLrJWi21P+kE3B5QZN/q/3cTEVB3j4emy+j3DhHjJX096J - HE5b/Ql5GqE=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAb3LeVK/doYxs7FwFIbvp21i6M27fmSXtIK3E + p36brmcQCjnbCeLpHkE2FroYZJQmtNY9EGGUzkQsyoBDicK3j3w754LGMDgn + s3PL+hDk16X45yBFgcnTS/C3jFbm3SklFsNfpLGEEbCjwlTyL9txnQfU6zw8 + +xHOrpSiSRM5hAA5/i2vEgErZlh9kVqKoXNJdj2X2oIjW8vw37rlPO6w4iIy + 3fTHtCFsfKqaa7QmsBuXrK6IDKMVsTPr+daav/8YwacVuptnzr+pFww/u3pb + +B/ES8qGRen7ibaZcoxBmxmUNtPSpuqsyHBnyVVJQO3c9ZQzLq+wRJYkKK+k + j+0DMTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCbhyOCOabOgrKCo5Jw + s5cUgDCvQ0SCr1BLrJWi21P+kE3B5QZN/q/3cTEVB3j4emy+j3DhHjJX096J + HE5b/Ql5GqE=] profiles::cacert_selfservice::https_address: :8443 profiles::cacert_selfservice::server_certificate: | - -----BEGIN CERTIFICATE----- - MIIGRjCCBC6gAwIBAgIDAvE1MA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB - Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV - BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjEwNzE2MjIyMTM2WhcNMjMwNzE2 - MjIyMTM2WjBjMQswCQYDVQQGEwJBVTEMMAoGA1UECBMDTlNXMQ8wDQYDVQQHEwZT - eWRuZXkxFDASBgNVBAoTC0NBY2VydCBJbmMuMR8wHQYDVQQDExZzZWxmc2Vydmlj - ZS5jYWNlcnQub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsz/5 - vDt+ZOwPvfQJiaZgN2VwIDF079gf5rVi0Isw7maNj1lcN3oNjyF2UneOkx9b5yw7 - kHytifd/Hz5Exg7DJDrSc7eW1tmXGZWWtK2PX3G0gG3uWfqfxMSmB6gHRvj+YcSb - AXzlzcO+SQQ7GV2nZI1ZpfJ1jLuBjK8Hchr7zp9IWw/dWJtROBuyIOTiLHiVKehe - vHOnvDF9MPqoPJFoi+PoZCU8MwCqKLTc/d/RfsvIG1BwnoyiDzieeDsCPfssJciz - Kb3MC0V+zw0LxWS3RPZMsR/rTz3sEIUyy/NdADdA4rY/LAXI1dVxNsJgaU6jGfO6 - aub21X6s4cHRsed07xBYHe5LJCV0ExAx23V0ihWM4R9mEFAyLrfuoO6oodiuopGE - jybeYEq0qLFjMpNZX5bnJ7X53Z9kb0kV2Ft+0jYFUmGvp27JnWN+dAcJ0T08+Uqs - zaiNS0fj4Wgd8WZYIkmVM+MzCGmKcjOvCgQFa+wZvvgRG69nsxl+Zr2e+8WUJoQi - Tvsp9z1YwidmN2U22HmX7xukvDVLWi0R7reSyjld3Wo9Qn/UCTkyYHpjPUdPhYQV - avOaturVpISXcANZi9XkMXO9k/osEywH2oeqy95bXT7w14Hla8Lg4Y5tISiKny9g - sZNeqx35v1CkDxofG/uHKI9EvVdJKyeHU9RXlXkCAwEAAaOCARAwggEMMAwGA1Ud - EwEB/wQCMAAwDgYDVR0PAQH/BAQDAgOoMDQGA1UdJQQtMCsGCCsGAQUFBwMCBggr - BgEFBQcDAQYJYIZIAYb4QgQBBgorBgEEAYI3CgMDMDMGCCsGAQUFBwEBBCcwJTAj - BggrBgEFBQcwAYYXaHR0cDovL29jc3AuY2FjZXJ0Lm9yZy8wOAYDVR0fBDEwLzAt - oCugKYYnaHR0cDovL2NybC5jYWNlcnQub3JnL2NsYXNzMy1yZXZva2UuY3JsMEcG - A1UdEQRAMD6CFnNlbGZzZXJ2aWNlLmNhY2VydC5vcmegJAYIKwYBBQUHCAWgGAwW - c2VsZnNlcnZpY2UuY2FjZXJ0Lm9yZzANBgkqhkiG9w0BAQ0FAAOCAgEAfyuR8eIs - vsC7wjW1fXTNwgeniAoiYvrWpDHQLmHX9cbkfQ+UkL5L9N9uJGdFa77GSPQ54wl0 - Cc+oGQcdO84h0hJAPZaiAgCBgE79h6ZLFLxdsbArjTTbNE8LDCRG8To+0Q9Gfvuh - RtsLh3R9mSCKXug9iJs4nV+3BeJI/wVWdkBY3gKdM4hgdLf6zW6lg0yLBRSi6b+k - ECuX8Pwjp/oxkNtptDettBXVNW/11j8AFDqOs+TlITbgmz1Gb2NE42C6Fl+cW4ZC - ksiLr1c57tUDpAvKmtU6f4n7cCbfXX3gZYMCrVLAkEdwi3LGbyKoa1Rfh4pIWUsY - gXmfEr7oFWI5jWSfOjbxvuJEaADOR30fLHqTWSe1egcgheDn/XcW8ktFhOoZYcpI - y2kLxhTW3K/cxy172xfm3k11/bTNWo1eyDLYNI+604KkFALowLtc+VG71CGhgCsv - sHNowDK5arfWb66qt4lgwqNVO3l4zCyulYRAS24twwVq1xOKTGEeJDexG+PidEa0 - 8rHGA0c9nmddvTXabRMCgMy4H5tXvyZm5L4WYNNLuBi2h0Zgjdsvx4ikfHH6KI09 - n4qkQ6vCStSbSiZ96ezAVN2Nb0tlFaSGJUGHhZnpvdeSgHI97r4X/52AXQj0SZO8 - vOh92Z6rXG+f9faejmypByLAl0dIaDG1VPQ= - -----END CERTIFICATE----- + -----BEGIN CERTIFICATE----- + MIIGRjCCBC6gAwIBAgIDAvE1MA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB + Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV + BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjEwNzE2MjIyMTM2WhcNMjMwNzE2 + MjIyMTM2WjBjMQswCQYDVQQGEwJBVTEMMAoGA1UECBMDTlNXMQ8wDQYDVQQHEwZT + eWRuZXkxFDASBgNVBAoTC0NBY2VydCBJbmMuMR8wHQYDVQQDExZzZWxmc2Vydmlj + ZS5jYWNlcnQub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsz/5 + vDt+ZOwPvfQJiaZgN2VwIDF079gf5rVi0Isw7maNj1lcN3oNjyF2UneOkx9b5yw7 + kHytifd/Hz5Exg7DJDrSc7eW1tmXGZWWtK2PX3G0gG3uWfqfxMSmB6gHRvj+YcSb + AXzlzcO+SQQ7GV2nZI1ZpfJ1jLuBjK8Hchr7zp9IWw/dWJtROBuyIOTiLHiVKehe + vHOnvDF9MPqoPJFoi+PoZCU8MwCqKLTc/d/RfsvIG1BwnoyiDzieeDsCPfssJciz + Kb3MC0V+zw0LxWS3RPZMsR/rTz3sEIUyy/NdADdA4rY/LAXI1dVxNsJgaU6jGfO6 + aub21X6s4cHRsed07xBYHe5LJCV0ExAx23V0ihWM4R9mEFAyLrfuoO6oodiuopGE + jybeYEq0qLFjMpNZX5bnJ7X53Z9kb0kV2Ft+0jYFUmGvp27JnWN+dAcJ0T08+Uqs + zaiNS0fj4Wgd8WZYIkmVM+MzCGmKcjOvCgQFa+wZvvgRG69nsxl+Zr2e+8WUJoQi + Tvsp9z1YwidmN2U22HmX7xukvDVLWi0R7reSyjld3Wo9Qn/UCTkyYHpjPUdPhYQV + avOaturVpISXcANZi9XkMXO9k/osEywH2oeqy95bXT7w14Hla8Lg4Y5tISiKny9g + sZNeqx35v1CkDxofG/uHKI9EvVdJKyeHU9RXlXkCAwEAAaOCARAwggEMMAwGA1Ud + EwEB/wQCMAAwDgYDVR0PAQH/BAQDAgOoMDQGA1UdJQQtMCsGCCsGAQUFBwMCBggr + BgEFBQcDAQYJYIZIAYb4QgQBBgorBgEEAYI3CgMDMDMGCCsGAQUFBwEBBCcwJTAj + BggrBgEFBQcwAYYXaHR0cDovL29jc3AuY2FjZXJ0Lm9yZy8wOAYDVR0fBDEwLzAt + oCugKYYnaHR0cDovL2NybC5jYWNlcnQub3JnL2NsYXNzMy1yZXZva2UuY3JsMEcG + A1UdEQRAMD6CFnNlbGZzZXJ2aWNlLmNhY2VydC5vcmegJAYIKwYBBQUHCAWgGAwW + c2VsZnNlcnZpY2UuY2FjZXJ0Lm9yZzANBgkqhkiG9w0BAQ0FAAOCAgEAfyuR8eIs + vsC7wjW1fXTNwgeniAoiYvrWpDHQLmHX9cbkfQ+UkL5L9N9uJGdFa77GSPQ54wl0 + Cc+oGQcdO84h0hJAPZaiAgCBgE79h6ZLFLxdsbArjTTbNE8LDCRG8To+0Q9Gfvuh + RtsLh3R9mSCKXug9iJs4nV+3BeJI/wVWdkBY3gKdM4hgdLf6zW6lg0yLBRSi6b+k + ECuX8Pwjp/oxkNtptDettBXVNW/11j8AFDqOs+TlITbgmz1Gb2NE42C6Fl+cW4ZC + ksiLr1c57tUDpAvKmtU6f4n7cCbfXX3gZYMCrVLAkEdwi3LGbyKoa1Rfh4pIWUsY + gXmfEr7oFWI5jWSfOjbxvuJEaADOR30fLHqTWSe1egcgheDn/XcW8ktFhOoZYcpI + y2kLxhTW3K/cxy172xfm3k11/bTNWo1eyDLYNI+604KkFALowLtc+VG71CGhgCsv + sHNowDK5arfWb66qt4lgwqNVO3l4zCyulYRAS24twwVq1xOKTGEeJDexG+PidEa0 + 8rHGA0c9nmddvTXabRMCgMy4H5tXvyZm5L4WYNNLuBi2h0Zgjdsvx4ikfHH6KI09 + n4qkQ6vCStSbSiZ96ezAVN2Nb0tlFaSGJUGHhZnpvdeSgHI97r4X/52AXQj0SZO8 + vOh92Z6rXG+f9faejmypByLAl0dIaDG1VPQ= + -----END CERTIFICATE----- profiles::cacert_selfservice::server_private_key: > - ENC[PKCS7,MIIOPQYJKoZIhvcNAQcDoIIOLjCCDioCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAt3on6CqHyfkSR12NDKy27ln9CNYSig4vnazz - 1SU89n50FroloNyQNkryp9owAQhmlkdI8+XQxMfP+ujXNahj2mjQQPJullm/ - i0/8Yr11b9e6CQ/S940Re6203Z+wJDOtOiiv7lckWeBojfvbh0jxU21wvgRM - WQy8qpyfReAeopxxjv7ibWR3/WdJIReIWgQnCtJv7Is5a+QqpYXbDb6G3AK0 - sHFyY2ZYmWOROwCV7cIRr51Ta7NLIC2y0U+TDc5FLzCR0sauA8jtvSc58pT5 - DFHBTsYdqlnlH0bsxqAffYuZdZfCB2gZhRFyshxprJt6Pp5DEsHlzmBgVu3d - 8Pg0uzCCDP4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEJUGBdM86l45Q2aM - CTGHxoaAggzQkBGmiEON8uEXus4pljSwufuQuH7+XLQxlE91NTaXiJaDh3q2 - iIfH+2/Z33GfOCsDrOkxtaHKrxAGatxvOQUKtfl8kCAkSNK2qrlRhfqyeJiR - 8twoLYe/p7ijufLZBxR05KrwfJC5baWqA4f1psy2c4kStgTe6w4T7iJMhAHH - mQM7FfbZgKncmsPAdEAxGj0r0sf0iLCOkAQsoZQ52J5oKUE8/q1ywjMYnnEy - a15JyQpODCjUI9pTpuGwUr90bnFAh9/WWblEQROwSdjCM/tRnMYlB5LW7pGE - WfXIZ/pxax7KDd9x3LG6gtDLyKpOCPSrotkO5NmjPKbJBu1PWeKT2tRWRUXR - Ss5D1nvCipJUgijwAsXpiojCHBOgo9zjXe7PKoqT+H3sGJ0Fj8tO8L+tEs63 - lVbYA2cIX4x8f8HGzIQoQu0bqPX+ZNO1kDxjR5gxYLfmWjXaoQtfaEB29mIr - KdpxjQ22cKw40CTE+Pd78g599aUHV0SNVnN7nW82vyZVl5nEiIQ0a8nO/A7Q - o1DnaSUykNENGxKQ7xShtV2Z9win2BkqBblkO86oIQuG8ExYvxnyEW1udL3o - D2vNrG7toLRAl9mTcP+YJbIgNX3pZIu6kY5WZA5cUEsKjG8Io9O2q8EExzUS - w55bpzDNWD7hd91m13vx3lIqlaWuOUvNVfT3WPPNYAhSOByWi/1c/wkE0sF9 - PKp3yi8pkK/uh50mfR6ZLTg3gDVJNobqWUeq8zay/4Wo5uzPGwgTa28gQSyT - IXeAdmSXz9HQBKcvunEkwefgHSIvFHPDxQo+0kodVWNjqyYxCwiuCpaWsXbH - IO7FL/+afYA3nCSk7Ijpo4Q/cKi0rtGBedvbxbLwwXlGhBDmimc6OLSHfaNQ - +0sVk8BxFqxBDhEW9A0t4XyPJ3SVv8SC66ldLYHW71Uajyysp9lhOLFwWFfO - sXwTMvXDF7q1x47d5s3UM8W34djobVBHjlrF8TNHLvI7DwrIktzRvJ60Qmch - OIspFZHNdmMAD2EK/LVwcSVfP+bkBeez3pX53y8lDPqaJtEGwygRPhAYyKyg - V0lwZoqcmJihxTLJPreolkIBbiWRh6TVafFAykxPJAdQDgQimS2o4FZtRkZt - 3A4vwK5zWhzDTezBzzTZAC9NuJA6VYWhiRrQ8NKrOhbz8D2lgPnuhJu71/vE - lfkAPCyQTIY8YYxDhL1XgnWsCCHleIAMHHpC+kGZ/vnu2nLIji2KR/ii1Fr1 - JbXh9E9i2GhHp0eucxYBwS50sVwAFdouM5pDi8kfIzT2Dzmd6mArUBBawjgt - cHCc0yeL9YgXRNxo2tBf73biJRBsC/+rtguaxnacb6JCszUbfAwXO44AR9YV - vuCg4WKp1zQrWRtN9E2fj9QXHyKcXEgKvaoUOmREipeS2DTdwG56PtDfRG/N - UPdrZnCDhZTY5Yvqo106bfAj0SY/ULGTXe3paBwaOcLTKOGTkXUVpK2dcUdw - k2TuiexKcRPlTjDMX/BH4HYeTeBR+UjZdOKGc2oQ4wsL4IsPhqcfK0GKVBCf - eGJ+mGIbGCT2HcWb2igeXL+BRD6ykimO4DfspgfDgIUDB7FZFJuUoaDRjQ/I - J4hWG6fLn9PNKFZ2BhQ1mv2eJy3yNiQXLtpkCarS2mRmipGVgrCHgO5S/TdL - B9Otn9dHKY6cuXXhenH1vqXBsLCnPFeX/6ewhJ+MTWryE5cIhLbEZHq9RtbW - zxJXe0eadPJXWLd6OBPqr0V9M/XGpI5q9k7tHpVvBn467RbQrAk7zkYQcOOL - J1ZYDmzjELd662qLNLR36YIC0/lX6aw/6T1cOqgnoh7GUDpt/z8b9K99LXXx - +FRO5KXSORj++DA3MdJoB4XeSkKPXp5xqoVP36/657ynj/dvNLhHS2QvcKvM - Nnr3icyk0jAlWip/sE+mRYJJ7mz3yB/sNx6QZ1vtWIiEypNK+fGPmi8NbchY - XPS99rbAmL0Kk66Xrjd63PqqWVw981YC3r6COxYQJR1v2l6WolAgcDdOU36f - EY41ltzSdSBtmCa/0Y2OAYkk/J5KxpMjYxoW080b7WNWNpaud4tPb1kiS4OA - 5NKSZpmyJwOogDsVrYyQrvybU7x+eybyGh7zU9JOhI81yt93O7kpeRjEbcTb - hRwUA9JN0JAAxxJVBuM29/SY9pBwprkgVFPME0m1Jfti9m7mf6rfxCOgMTLS - zpPRyLUjRYLx95W6AlUpCi9CTZhlSXZB6rtJGRfm8vz44nZXbtaE/qhAA7h/ - bf0OL9GVmROHm2w9nxeFtVGKBcmgDGECFgeBZfT+ImrAdSmed4GO0BqjzooJ - EZuet7nnm40kz+wyZrJAzUyyXUjkVj01r6yLlX1dogul8aeGWe44iXaswiXv - ZFfOh3ewMa93kdjJQI1WTc3LmpNUoMJD4QwPOIs6H8Vsyzu9DKefmvEWBBa1 - CxX+F32/XPvn3qX+Qi0eJE1rvRnynyTUNzQSOZtTB+YUAtmqUglLeN7E3cSC - wlJ46co2TkyaRZqrY28cax90GhOgkmOZK8MZQ4kPDWA1tddS3QP5L558sWeZ - K5aMEIYTwCazPsVcy7v6MNOM06Yhnce1BOhioDS8vPI8pf84HDC99MSZSvYr - qvDmr/gOVY+BrYfk0E9y7l4eVSpD7uDEDhaPS6lTZrj5JclihoGGKWUPmg7q - XXEH3rwF9NqloFBDNDIcYTnIOpdo+vDKF04oA4Q3K35dh67kwVjW/3DqdC5R - k/AcB+8+nCjWCxjYCxF9EJpenSmYhS8Seeuly4w57qpT23bwDk39whqBvnz3 - o/tWFCLhC9EuQ95S5h7cKxTLatgfD6/U8zuA8kkFA2Aq9JB2kZthU1HWglr5 - 7OhcmTa3j4zEF/946VjmjneVxdsbbT2WAf4+hf7CuByI0xEeGmboJQ6sAvoo - 1ASdTIzZbfnbI0KjBuNK7OkI0XtmUr+hz3bWGrrXXOeEXPLd8WCJf9QzWjnS - kLta5LzCHU5D54w20W5OxKmIW8al8QweYPKgV/PrOFwYLy57+2NJuDfu7646 - uszXtkOdfvAHp98KR/cGdaBMTGqO54CFfTBm9GlZ0wnkiJw2KxoNiJlsBoXB - ahHGJzBU2QMGmWCLlk9cJXHJsj0FwhxCeGionq5IeJ4aUHTACFTnRn0mLJIE - 0rNAd6ZuprpGb8ZhMOD2Evyfhfi6QH8k7lQkvZFnAKBkCwm9VvNMtNnBK1Jw - SZPc1RJ/zuh/q/K5ROLz+w2hAXB8uzAvxxq/rUr9q8OHtrNspQL1hCiTYIpM - 39ty9yOFY+vGSNTgkwNEVeMU511nngQFRF/kyNAXNFGYLdR+LyOWDzH8QcP0 - PSH4aqYeRR8ID2Rm4dwOBw7r97wQmH3s8YRXQ/7fryTx/5d6mAnuFW6y3v33 - VSU+SSaC8u+D1QWPg5opS0I0/om8cF53+hlp5KMZVRQB2Orl4TqXaYAG9MQt - f58DDo3aIKBGpw4cV34XVq0N71oxxsileK9Lwi+MdwYLSkgy/dfZHlV7hRCT - BcFA+WD4GvCEVriLey6E5u7RSxKg3X2TeuLGM8q18HpAzaJtfWIu31bzBJrr - 0/Wzm/MQXlwHNzWJdH0igetK9PJz5QZ+kkU7TaP+crYm4KrA/7/d+fEdLIIB - zZQ6LDXJeQjW2gLSirKezuFbpHY1uhJibi1gASxqT1e2WuJTvliUSoc5aEiu - yivOYX+nyg7+EpUl1WDsOqAbSchqsM1oQ5oCdkehWAN00szO+/Kn3SaIZLda - v9pUtuxYSOTVNZECXq1nR4/0tMO9qFdlaBk8PzWIkeNkrCblZ8tS9yTpoSYe - omUKIN0npvEqB6Vfdk0ZpxVxqErnsr8gGiCPmGebtklFFvGDdWI1gfnIrKeP - Llirqqf3mIv8107hv8ozayWsHD1PhEiRKmputKU+5bb3PJb61MiFNaIdflgR - OJYhZ6bhtVm/ofUQAUY2AATURZbkSYPHYidgXd45QoVOA0Oc5pxmA3f/tJ+f - avp32Ix/y5MmzpPwUESjv7WPnvlU+WADzXuyTJXCOED6Y5LMp//U0lNr+AXQ - rlc8d6na/DTTyIDFd42W+Yvy7wl0JofyIUSsPGRx/srzzeJAq0k31GmmMPXN - TGb/HtFj+BaUDPn+5G/2KdCsCbFqKk2MiuBZ7GYVxJMH83zFAhxQy8APOgke - b24elx5vnfEENvbFrlWHp48KJzHGiBwvabw2TGSsIZj0TCIIS179F7T/ecyy - meSzL66S0bE3fMQW7PHJBEJfd1rF7Lzc1zyYOuEEKxKuZTAv0oNJa7boRFWN - b7xfkInLzKPfTfNlY9txwOqlGWYfZxa4d6fBKbVxdspf8WnTIrXgWshjWYcV - /r8P6g==] + ENC[PKCS7,MIIOPQYJKoZIhvcNAQcDoIIOLjCCDioCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAt3on6CqHyfkSR12NDKy27ln9CNYSig4vnazz + 1SU89n50FroloNyQNkryp9owAQhmlkdI8+XQxMfP+ujXNahj2mjQQPJullm/ + i0/8Yr11b9e6CQ/S940Re6203Z+wJDOtOiiv7lckWeBojfvbh0jxU21wvgRM + WQy8qpyfReAeopxxjv7ibWR3/WdJIReIWgQnCtJv7Is5a+QqpYXbDb6G3AK0 + sHFyY2ZYmWOROwCV7cIRr51Ta7NLIC2y0U+TDc5FLzCR0sauA8jtvSc58pT5 + DFHBTsYdqlnlH0bsxqAffYuZdZfCB2gZhRFyshxprJt6Pp5DEsHlzmBgVu3d + 8Pg0uzCCDP4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEJUGBdM86l45Q2aM + CTGHxoaAggzQkBGmiEON8uEXus4pljSwufuQuH7+XLQxlE91NTaXiJaDh3q2 + iIfH+2/Z33GfOCsDrOkxtaHKrxAGatxvOQUKtfl8kCAkSNK2qrlRhfqyeJiR + 8twoLYe/p7ijufLZBxR05KrwfJC5baWqA4f1psy2c4kStgTe6w4T7iJMhAHH + mQM7FfbZgKncmsPAdEAxGj0r0sf0iLCOkAQsoZQ52J5oKUE8/q1ywjMYnnEy + a15JyQpODCjUI9pTpuGwUr90bnFAh9/WWblEQROwSdjCM/tRnMYlB5LW7pGE + WfXIZ/pxax7KDd9x3LG6gtDLyKpOCPSrotkO5NmjPKbJBu1PWeKT2tRWRUXR + Ss5D1nvCipJUgijwAsXpiojCHBOgo9zjXe7PKoqT+H3sGJ0Fj8tO8L+tEs63 + lVbYA2cIX4x8f8HGzIQoQu0bqPX+ZNO1kDxjR5gxYLfmWjXaoQtfaEB29mIr + KdpxjQ22cKw40CTE+Pd78g599aUHV0SNVnN7nW82vyZVl5nEiIQ0a8nO/A7Q + o1DnaSUykNENGxKQ7xShtV2Z9win2BkqBblkO86oIQuG8ExYvxnyEW1udL3o + D2vNrG7toLRAl9mTcP+YJbIgNX3pZIu6kY5WZA5cUEsKjG8Io9O2q8EExzUS + w55bpzDNWD7hd91m13vx3lIqlaWuOUvNVfT3WPPNYAhSOByWi/1c/wkE0sF9 + PKp3yi8pkK/uh50mfR6ZLTg3gDVJNobqWUeq8zay/4Wo5uzPGwgTa28gQSyT + IXeAdmSXz9HQBKcvunEkwefgHSIvFHPDxQo+0kodVWNjqyYxCwiuCpaWsXbH + IO7FL/+afYA3nCSk7Ijpo4Q/cKi0rtGBedvbxbLwwXlGhBDmimc6OLSHfaNQ + +0sVk8BxFqxBDhEW9A0t4XyPJ3SVv8SC66ldLYHW71Uajyysp9lhOLFwWFfO + sXwTMvXDF7q1x47d5s3UM8W34djobVBHjlrF8TNHLvI7DwrIktzRvJ60Qmch + OIspFZHNdmMAD2EK/LVwcSVfP+bkBeez3pX53y8lDPqaJtEGwygRPhAYyKyg + V0lwZoqcmJihxTLJPreolkIBbiWRh6TVafFAykxPJAdQDgQimS2o4FZtRkZt + 3A4vwK5zWhzDTezBzzTZAC9NuJA6VYWhiRrQ8NKrOhbz8D2lgPnuhJu71/vE + lfkAPCyQTIY8YYxDhL1XgnWsCCHleIAMHHpC+kGZ/vnu2nLIji2KR/ii1Fr1 + JbXh9E9i2GhHp0eucxYBwS50sVwAFdouM5pDi8kfIzT2Dzmd6mArUBBawjgt + cHCc0yeL9YgXRNxo2tBf73biJRBsC/+rtguaxnacb6JCszUbfAwXO44AR9YV + vuCg4WKp1zQrWRtN9E2fj9QXHyKcXEgKvaoUOmREipeS2DTdwG56PtDfRG/N + UPdrZnCDhZTY5Yvqo106bfAj0SY/ULGTXe3paBwaOcLTKOGTkXUVpK2dcUdw + k2TuiexKcRPlTjDMX/BH4HYeTeBR+UjZdOKGc2oQ4wsL4IsPhqcfK0GKVBCf + eGJ+mGIbGCT2HcWb2igeXL+BRD6ykimO4DfspgfDgIUDB7FZFJuUoaDRjQ/I + J4hWG6fLn9PNKFZ2BhQ1mv2eJy3yNiQXLtpkCarS2mRmipGVgrCHgO5S/TdL + B9Otn9dHKY6cuXXhenH1vqXBsLCnPFeX/6ewhJ+MTWryE5cIhLbEZHq9RtbW + zxJXe0eadPJXWLd6OBPqr0V9M/XGpI5q9k7tHpVvBn467RbQrAk7zkYQcOOL + J1ZYDmzjELd662qLNLR36YIC0/lX6aw/6T1cOqgnoh7GUDpt/z8b9K99LXXx + +FRO5KXSORj++DA3MdJoB4XeSkKPXp5xqoVP36/657ynj/dvNLhHS2QvcKvM + Nnr3icyk0jAlWip/sE+mRYJJ7mz3yB/sNx6QZ1vtWIiEypNK+fGPmi8NbchY + XPS99rbAmL0Kk66Xrjd63PqqWVw981YC3r6COxYQJR1v2l6WolAgcDdOU36f + EY41ltzSdSBtmCa/0Y2OAYkk/J5KxpMjYxoW080b7WNWNpaud4tPb1kiS4OA + 5NKSZpmyJwOogDsVrYyQrvybU7x+eybyGh7zU9JOhI81yt93O7kpeRjEbcTb + hRwUA9JN0JAAxxJVBuM29/SY9pBwprkgVFPME0m1Jfti9m7mf6rfxCOgMTLS + zpPRyLUjRYLx95W6AlUpCi9CTZhlSXZB6rtJGRfm8vz44nZXbtaE/qhAA7h/ + bf0OL9GVmROHm2w9nxeFtVGKBcmgDGECFgeBZfT+ImrAdSmed4GO0BqjzooJ + EZuet7nnm40kz+wyZrJAzUyyXUjkVj01r6yLlX1dogul8aeGWe44iXaswiXv + ZFfOh3ewMa93kdjJQI1WTc3LmpNUoMJD4QwPOIs6H8Vsyzu9DKefmvEWBBa1 + CxX+F32/XPvn3qX+Qi0eJE1rvRnynyTUNzQSOZtTB+YUAtmqUglLeN7E3cSC + wlJ46co2TkyaRZqrY28cax90GhOgkmOZK8MZQ4kPDWA1tddS3QP5L558sWeZ + K5aMEIYTwCazPsVcy7v6MNOM06Yhnce1BOhioDS8vPI8pf84HDC99MSZSvYr + qvDmr/gOVY+BrYfk0E9y7l4eVSpD7uDEDhaPS6lTZrj5JclihoGGKWUPmg7q + XXEH3rwF9NqloFBDNDIcYTnIOpdo+vDKF04oA4Q3K35dh67kwVjW/3DqdC5R + k/AcB+8+nCjWCxjYCxF9EJpenSmYhS8Seeuly4w57qpT23bwDk39whqBvnz3 + o/tWFCLhC9EuQ95S5h7cKxTLatgfD6/U8zuA8kkFA2Aq9JB2kZthU1HWglr5 + 7OhcmTa3j4zEF/946VjmjneVxdsbbT2WAf4+hf7CuByI0xEeGmboJQ6sAvoo + 1ASdTIzZbfnbI0KjBuNK7OkI0XtmUr+hz3bWGrrXXOeEXPLd8WCJf9QzWjnS + kLta5LzCHU5D54w20W5OxKmIW8al8QweYPKgV/PrOFwYLy57+2NJuDfu7646 + uszXtkOdfvAHp98KR/cGdaBMTGqO54CFfTBm9GlZ0wnkiJw2KxoNiJlsBoXB + ahHGJzBU2QMGmWCLlk9cJXHJsj0FwhxCeGionq5IeJ4aUHTACFTnRn0mLJIE + 0rNAd6ZuprpGb8ZhMOD2Evyfhfi6QH8k7lQkvZFnAKBkCwm9VvNMtNnBK1Jw + SZPc1RJ/zuh/q/K5ROLz+w2hAXB8uzAvxxq/rUr9q8OHtrNspQL1hCiTYIpM + 39ty9yOFY+vGSNTgkwNEVeMU511nngQFRF/kyNAXNFGYLdR+LyOWDzH8QcP0 + PSH4aqYeRR8ID2Rm4dwOBw7r97wQmH3s8YRXQ/7fryTx/5d6mAnuFW6y3v33 + VSU+SSaC8u+D1QWPg5opS0I0/om8cF53+hlp5KMZVRQB2Orl4TqXaYAG9MQt + f58DDo3aIKBGpw4cV34XVq0N71oxxsileK9Lwi+MdwYLSkgy/dfZHlV7hRCT + BcFA+WD4GvCEVriLey6E5u7RSxKg3X2TeuLGM8q18HpAzaJtfWIu31bzBJrr + 0/Wzm/MQXlwHNzWJdH0igetK9PJz5QZ+kkU7TaP+crYm4KrA/7/d+fEdLIIB + zZQ6LDXJeQjW2gLSirKezuFbpHY1uhJibi1gASxqT1e2WuJTvliUSoc5aEiu + yivOYX+nyg7+EpUl1WDsOqAbSchqsM1oQ5oCdkehWAN00szO+/Kn3SaIZLda + v9pUtuxYSOTVNZECXq1nR4/0tMO9qFdlaBk8PzWIkeNkrCblZ8tS9yTpoSYe + omUKIN0npvEqB6Vfdk0ZpxVxqErnsr8gGiCPmGebtklFFvGDdWI1gfnIrKeP + Llirqqf3mIv8107hv8ozayWsHD1PhEiRKmputKU+5bb3PJb61MiFNaIdflgR + OJYhZ6bhtVm/ofUQAUY2AATURZbkSYPHYidgXd45QoVOA0Oc5pxmA3f/tJ+f + avp32Ix/y5MmzpPwUESjv7WPnvlU+WADzXuyTJXCOED6Y5LMp//U0lNr+AXQ + rlc8d6na/DTTyIDFd42W+Yvy7wl0JofyIUSsPGRx/srzzeJAq0k31GmmMPXN + TGb/HtFj+BaUDPn+5G/2KdCsCbFqKk2MiuBZ7GYVxJMH83zFAhxQy8APOgke + b24elx5vnfEENvbFrlWHp48KJzHGiBwvabw2TGSsIZj0TCIIS179F7T/ecyy + meSzL66S0bE3fMQW7PHJBEJfd1rF7Lzc1zyYOuEEKxKuZTAv0oNJa7boRFWN + b7xfkInLzKPfTfNlY9txwOqlGWYfZxa4d6fBKbVxdspf8WnTIrXgWshjWYcV + /r8P6g==] profiles::cacert_selfservice::jwt_private_key: > - ENC[PKCS7,MIICXAYJKoZIhvcNAQcDoIICTTCCAkkCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAqkP3W1VRWy1uh8R6lGuqFXDVf+B0HhrFHmvn - FtxQWRVlQZzudoQnWJsLR/J41qk7bX/eOmv8S5nKIwRIvovwb7tI+T9TaJ33 - hXUMZ9TBTjkz3OD6Pv/dsp/2zvGFHICEwIcUaJD2tBAqFPM1JhlJqXAwRNCK - d2r8787fglChU/EpMhA45FvXvkCDxBE9W+L+aMzMlV6DcnQPCqKZwADQuBDS - qw41j/hvmPzjconmV8aknXBdTaKUqKuspmn3tLIQGMRHUnKxq80AV5kdqlTy - 1PwhN6FdFqBfosJuemV6eM6B0wupa4NK5iYvuRN/htQXJOjw562KUPDE1oe3 - PXqK0DCCAR0GCSqGSIb3DQEHATAdBglghkgBZQMEASoEECj13+wuFOeVRqiX - d/s4ZZSAgfAx98UDQlEtcfX+5fCgw2ofqTD1K1KBzpGemGD9UbK0AI+sFhpY - SyeuzhXS+s/XP9MYtlHgZiVgt7B95+EnCoGNGWfY5gWFzSvu63zikEGTT9tf - 6iPS/A4sYu+HFPuE/ryHrCBJi0e1yaf2pa5IctFhpeWF++Dw3pmYC3c3sZb6 - ieCxxZ4r+NiPvS3xnAE+q3P7z5R3OTVYZkmLCupzBtnqi8Ne/TdvmUBWDtw4 - 2v8bs97vfnguWiynjekfeZgjO28SWiJYwLFuQUtV+kvYl9baPpORFTfuI3Rs - dCF8snPWlLs3m+PXsz2HoiGe0s2tBKM=] + ENC[PKCS7,MIICXAYJKoZIhvcNAQcDoIICTTCCAkkCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAqkP3W1VRWy1uh8R6lGuqFXDVf+B0HhrFHmvn + FtxQWRVlQZzudoQnWJsLR/J41qk7bX/eOmv8S5nKIwRIvovwb7tI+T9TaJ33 + hXUMZ9TBTjkz3OD6Pv/dsp/2zvGFHICEwIcUaJD2tBAqFPM1JhlJqXAwRNCK + d2r8787fglChU/EpMhA45FvXvkCDxBE9W+L+aMzMlV6DcnQPCqKZwADQuBDS + qw41j/hvmPzjconmV8aknXBdTaKUqKuspmn3tLIQGMRHUnKxq80AV5kdqlTy + 1PwhN6FdFqBfosJuemV6eM6B0wupa4NK5iYvuRN/htQXJOjw562KUPDE1oe3 + PXqK0DCCAR0GCSqGSIb3DQEHATAdBglghkgBZQMEASoEECj13+wuFOeVRqiX + d/s4ZZSAgfAx98UDQlEtcfX+5fCgw2ofqTD1K1KBzpGemGD9UbK0AI+sFhpY + SyeuzhXS+s/XP9MYtlHgZiVgt7B95+EnCoGNGWfY5gWFzSvu63zikEGTT9tf + 6iPS/A4sYu+HFPuE/ryHrCBJi0e1yaf2pa5IctFhpeWF++Dw3pmYC3c3sZb6 + ieCxxZ4r+NiPvS3xnAE+q3P7z5R3OTVYZkmLCupzBtnqi8Ne/TdvmUBWDtw4 + 2v8bs97vfnguWiynjekfeZgjO28SWiJYwLFuQUtV+kvYl9baPpORFTfuI3Rs + dCF8snPWlLs3m+PXsz2HoiGe0s2tBKM=] profiles::x509cert_common::certificates: 'webmail.cacert.org': certificate: | -----BEGIN CERTIFICATE----- - MIIGdDCCBFygAwIBAgIDAuN8MA0GCSqGSIb3DQEBCwUAMFQxFDASBgNVBAoTC0NB + MIIGdDCCBFygAwIBAgIDAvroMA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV - BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjAwNjA2MTExMDQxWhcNMjIwNjA2 - MTExMDQxWjBfMQswCQYDVQQGEwJBVTEMMAoGA1UECBMDTlNXMQ8wDQYDVQQHEwZT + BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjIwNzE2MDkwODM1WhcNMjQwNzE1 + MDkwODM1WjBfMQswCQYDVQQGEwJBVTEMMAoGA1UECBMDTlNXMQ8wDQYDVQQHEwZT eWRuZXkxFDASBgNVBAoTC0NBY2VydCBJbmMuMRswGQYDVQQDExJ3ZWJtYWlsLmNh Y2VydC5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCspKMHnd/Y xvVqB7B/3bXfg7nReRR6WsP0xFzharKLkymoh3cMoFZU6gW/AyLPq2wicjJPtEUi @@ -245,18 +245,18 @@ profiles::x509cert_common::certificates: hidodHRwOi8vY3JsLmNhY2VydC5vcmcvY2xhc3MzLXJldm9rZS5jcmwweQYDVR0R BHIwcIISd2VibWFpbC5jYWNlcnQub3JnoCAGCCsGAQUFBwgFoBQMEndlYm1haWwu Y2FjZXJ0Lm9yZ4IUY29tbXVuaXR5LmNhY2VydC5vcmegIgYIKwYBBQUHCAWgFgwU - Y29tbXVuaXR5LmNhY2VydC5vcmcwDQYJKoZIhvcNAQELBQADggIBAAStZDsACPPf - /4NhO2O8ANSAOH6hIHFaxEbB4+aEY7an7rB/84Dis6O8xfh/K9Z+M9uob/jIfhEd - 2bJdufSDbp3OkrhQj9/Acz2o0xettiFgJAh0SNf8/dH9U1cqRPCK3dNna6z8vOJJ - XJJlyzTVli3N4AZOycmD3XNpC3INiEFOFRwfJLR7I4Nlv8YylmSc+BpnYlYQOWii - TXfNWcmojuW/JHJT0xmMz0gpJOCbvjrd0MHVj8ygEP2u9a7kHMAE7o1Wc/P2KsqA - +l1011KpjVNhO4Lln54ziWQ2F2x/R1dHNk5WrV9Y4J06drx1/UDR7QyLQ99II4YV - qC+C/DYkwOzvBrWOWpoOov3PmrDEpsbVoWvIDyb0+G7xgm6nGSexaGbVxmXj07/o - 7cW81GwohK29n6MXtVFcILAOHl5xyRH4f0PqRYx9WAu+pxpH8E423dnMpTNurkYS - e5yNfo4tL+Fl91RcanwcVA0lFff07GsfFQn1ksgIMFvEVsVaK8OYHiOIgfr1eLUW - DsCt63P8dEQf38vKlWD2XO7yD1jgjBOsFFbb/Eq8fGx8KiCGknNPZ2y2F4rhHew5 - od2HHMh61oL7n90kHdheFiPPwf8MtDb89yhPLPEKSLmVYB0NjhygOERwgZvix6Rm - 49YgOhuoXJwGGiBI222zx/q/k6eI0wpB + Y29tbXVuaXR5LmNhY2VydC5vcmcwDQYJKoZIhvcNAQENBQADggIBAJI4h/417PFk + Ds/Q2v0regpEiIaXggnFLs3L3x58RP6uE4tAMTBiGrxbpytXxlIPLWdvBtxiJbQu + JycMKZ/ZvUUfHABKmVPpLMc1110CkDH4wnTH1/wdu/g35YrY91lI3ukVfhH+FCru + kL4vfS6CTYPf3rlJOf63FD/XdIJ3YtF1KVNwAoSoKrhU5+UJul+uY+30ghhsnrx/ + gXuyoDr+/Qakz8WqYjVMe+gWqIVhabq/1UzIbNBb2Upc7o+9uoIw32sxQJPz8mxs + RlQdUd4XJLis/ZJIxGE7Ii8Fpyy7RxsSl7XDXlda9HNquf7gJP2bWaLje5RKBzzK + 2YM6goGKcbTvdhsBeRJRvmixeXcqEVqXUUtBvuDMsp1geDZag0PitvriedjB5zXd + DHg4F0mh6gV2MsMjhCzKvMY6nx8nf1GVZeQX0Me4c4W4gSUnXLmmUarmi0vg1OJ+ + 61FLwxtCPyZAxlwnpMSCaT0KD8jzLz9fArv5dN2O0EqRHFzYQpVEAlHvfECA6FtR + ZcTGUPxat8auCOf5lVjHflCFdaGx5o483TqrATzQFfOZWzxtTrZ6H8BH6kRB0XSg + IeRxyzEqfD/IW+cJtKZplAJEzlv48BZImumLLQY+ROFryONYbLP3kIBsBsYelqNi + UtWEx9lSBrDbaHQNDUuH6yJmHZWYjgTg -----END CERTIFICATE----- private_key: > ENC[PKCS7,MIIOPQYJKoZIhvcNAQcDoIIOLjCCDioCAQAxggEhMIIBHQIBADAFMAACAQEw diff --git a/hieradata/nodes/email.yaml b/hieradata/nodes/email.yaml index d8999d5..265a6de 100644 --- a/hieradata/nodes/email.yaml +++ b/hieradata/nodes/email.yaml @@ -6,16 +6,16 @@ profiles::base::admins: - law - jselzer profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEADx2myUcKr6RUVuWzwacoj5CCXO8klQz3wvjy - kTIzTiJ5orDP4DKEBff039aBlocks3IWpvdXdv4qLdpHt4jrRpnUi7P7/w/A - uYx+5+3euAF/EHOIDZ6BKnvW5K1BbGcVug0OVxYfqmHKcPu6ChQyYnvEnSmx - Tt/n7MNcczAONzibh/o+IiEdpBkSeI6SOuOOa6au0KeA/vXNQyBgz1wD7JDr - HqKpMYpmAqVfXqQTzjgNVTU7Xh1Cvj85d/oNrfhVJGy62LW09CRUALeATlF3 - dyyXly8q/Zjm+DeYom9futjUFWhQUTft58YOE+LSIYbvC4RsPdmMU+AaMdGM - aVBhmjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDmO1bK1F+o/ClrvyHP - qDUegDB5FE/kCJHikejLTd9x65fkNuaUMs9uTYaTUydsk/yPsD/fZWpRU3hM - nUgJAjygFfc=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEADx2myUcKr6RUVuWzwacoj5CCXO8klQz3wvjy + kTIzTiJ5orDP4DKEBff039aBlocks3IWpvdXdv4qLdpHt4jrRpnUi7P7/w/A + uYx+5+3euAF/EHOIDZ6BKnvW5K1BbGcVug0OVxYfqmHKcPu6ChQyYnvEnSmx + Tt/n7MNcczAONzibh/o+IiEdpBkSeI6SOuOOa6au0KeA/vXNQyBgz1wD7JDr + HqKpMYpmAqVfXqQTzjgNVTU7Xh1Cvj85d/oNrfhVJGy62LW09CRUALeATlF3 + dyyXly8q/Zjm+DeYom9futjUFWhQUTft58YOE+LSIYbvC4RsPdmMU+AaMdGM + aVBhmjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDmO1bK1F+o/ClrvyHP + qDUegDB5FE/kCJHikejLTd9x65fkNuaUMs9uTYaTUydsk/yPsD/fZWpRU3hM + nUgJAjygFfc=] profiles::cacert_selfservice_api::client_identities: - id: cac3ad11-fa50-43f6-8ded-15f598b6ca2a key: | @@ -24,147 +24,147 @@ profiles::cacert_selfservice_api::client_identities: 0J/6SxMU+jix4InG1tFL6yiikQqZMY9Gu4yYgF/WhiLrgjPbaGvlln0/FA== -----END PUBLIC KEY----- profiles::cacert_selfservice_api::db_password: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAjOBz2QKZTSY8lyV3SWjjatpm4CdVHPr4kfmx - UwfclDNRZr2w2vZgFLOlImfwJCpGa0xJsEHtS+IEkIV8Mh7jfCmQ6bVWDGtt - q1mYRdFHtUX4P2/Yw0sSXuMa7IGKeV7xYL3KNxZljjNieNP//DoCKF1MNE0V - ik2xO6IRTd8vT2VAVOxSgarn9hs5aL7PpxmvTH0rp+Q5pgjUm4cHFjbW3ur5 - q2XWwfydXPfnBsG17xHlrFJowMZM9fRyq7FuYsm+zIYkm1+AgzFEr6ogA4Fc - pTVghKACVzFMpd9v7u9FRvqbrUR+Q1GdckbwkvAJlkCkPLKah1LHoZW4jHlj - OWG1xTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDMdsp1Zc87SdO2yp+w - R9V1gDAZYPSwQJ/GbXBPy614dS5z++Q/8Go0Eve3bX+atTkYa4q3E5qrscAb - CtCL1kfU66I=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAjOBz2QKZTSY8lyV3SWjjatpm4CdVHPr4kfmx + UwfclDNRZr2w2vZgFLOlImfwJCpGa0xJsEHtS+IEkIV8Mh7jfCmQ6bVWDGtt + q1mYRdFHtUX4P2/Yw0sSXuMa7IGKeV7xYL3KNxZljjNieNP//DoCKF1MNE0V + ik2xO6IRTd8vT2VAVOxSgarn9hs5aL7PpxmvTH0rp+Q5pgjUm4cHFjbW3ur5 + q2XWwfydXPfnBsG17xHlrFJowMZM9fRyq7FuYsm+zIYkm1+AgzFEr6ogA4Fc + pTVghKACVzFMpd9v7u9FRvqbrUR+Q1GdckbwkvAJlkCkPLKah1LHoZW4jHlj + OWG1xTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDMdsp1Zc87SdO2yp+w + R9V1gDAZYPSwQJ/GbXBPy614dS5z++Q/8Go0Eve3bX+atTkYa4q3E5qrscAb + CtCL1kfU66I=] profiles::cacert_selfservice_api::db_username: > - ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAOj5c9aTiQd+MKVJmAoSMp+9/9YtdFmRtCyyA - 6BMb3YqvQT8D70VI3Ttq6AaF0S3xttJvwHdDUgYv4pEJ9V7dnQUZb/mGi7ZN - NM/R7VPN7sT/yS/z45TvGyz/VjSQuisCzj/cCg6ikXg2//BXj2h68BebiQz+ - 2NqJWrucTCjvK48eEu8QDKzigUyjGOpwkVD89RB2dHacSPbHqA5yTP1YLQdY - JiG8S/IAqMjVKzuQiPnqrfmLBqiFHoARF68UML1rS46Tt5bV4DcVriIjZiUN - Nt9bzOpBkyFkqAYFzXbYyQ3JeR4Mfb9i2wP+tIw5Hd2GaeoWBEJAdaqzsOb0 - 5NJX+DA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCl0t3nd/FDwqktfYoZ - ReaagBBkwO8Mi7X2JTPI4jX5lDrS] + ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAOj5c9aTiQd+MKVJmAoSMp+9/9YtdFmRtCyyA + 6BMb3YqvQT8D70VI3Ttq6AaF0S3xttJvwHdDUgYv4pEJ9V7dnQUZb/mGi7ZN + NM/R7VPN7sT/yS/z45TvGyz/VjSQuisCzj/cCg6ikXg2//BXj2h68BebiQz+ + 2NqJWrucTCjvK48eEu8QDKzigUyjGOpwkVD89RB2dHacSPbHqA5yTP1YLQdY + JiG8S/IAqMjVKzuQiPnqrfmLBqiFHoARF68UML1rS46Tt5bV4DcVriIjZiUN + Nt9bzOpBkyFkqAYFzXbYyQ3JeR4Mfb9i2wP+tIw5Hd2GaeoWBEJAdaqzsOb0 + 5NJX+DA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCl0t3nd/FDwqktfYoZ + ReaagBBkwO8Mi7X2JTPI4jX5lDrS] profiles::cacert_selfservice_api::mail_host: email.cacert.org profiles::cacert_selfservice_api::server_certificate: | - -----BEGIN CERTIFICATE----- - MIIGRjCCBC6gAwIBAgIDAvE0MA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB - Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV - BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjEwNzE2MjIyMTMzWhcNMjMwNzE2 - MjIyMTMzWjBjMQswCQYDVQQGEwJBVTEMMAoGA1UECBMDTlNXMQ8wDQYDVQQHEwZT - eWRuZXkxFDASBgNVBAoTC0NBY2VydCBJbmMuMR8wHQYDVQQDExZlbWFpbC5pbmZy - YS5jYWNlcnQub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzyu4 - maECP9uBDeaqV9WDkEHj4YM67yMhenpdvabPV9b7bWXX0EeBmXiEd+8sHKR3cJqn - i2RAnthNJdNYHf0cgJjyhDGAVU5RL1uZMaEbtTIX7jWPbXMp1OX2I8pDtgB5QLAm - Q5sKmXhgH+DCVhxaud5B/CCI6eGfMjxH4fi5+iqSWsopa8Eh6If6pgh1WcFiXu+U - QUa+2oSOwzG+AS16g1guNq+dqQKpGDx+qT4gg/QWrt5/bEhTlZOMUUPi9MoIV5lU - Lqdgkn6Df6DPisT7S7iYrEM3HBLsxxoCT934UP/TN7yaOjgXYLVO59YzltOCAPiK - nqheDAgHTFOqEQjxzY49fr4xHzf7eS4AaZzkM5x65lL7gmCXBKhOgGf5o1uiy90/ - nP1A16QWJZbjFZs/ExwSOqDUMqp2rfxkjE8UCHy2WQeBsOYUrWeDqUMoAlPRDbnM - EYYY+cbddFiorBsT8Pps/qJzp6jYnFK38N+jRY8VkaDfN4L2LIkNv6lpiCt/7QNi - 7+LzFfzaSNkThaF4Gp0feTbzLvuMhMuZevC1MynrYyvCCoSgRPl8WuFvY+Unb4Cy - gjTpf6GIyNmnDFkVrGNX6VEXIJrJA7OmlWN4aKlyeNKpUhKkjAAh+GA72PpD6Hmq - SxFNPKQrVzzToXebo4y48axz6lklSlK8uTgrBh8CAwEAAaOCARAwggEMMAwGA1Ud - EwEB/wQCMAAwDgYDVR0PAQH/BAQDAgOoMDQGA1UdJQQtMCsGCCsGAQUFBwMCBggr - BgEFBQcDAQYJYIZIAYb4QgQBBgorBgEEAYI3CgMDMDMGCCsGAQUFBwEBBCcwJTAj - BggrBgEFBQcwAYYXaHR0cDovL29jc3AuY2FjZXJ0Lm9yZy8wOAYDVR0fBDEwLzAt - oCugKYYnaHR0cDovL2NybC5jYWNlcnQub3JnL2NsYXNzMy1yZXZva2UuY3JsMEcG - A1UdEQRAMD6CFmVtYWlsLmluZnJhLmNhY2VydC5vcmegJAYIKwYBBQUHCAWgGAwW - ZW1haWwuaW5mcmEuY2FjZXJ0Lm9yZzANBgkqhkiG9w0BAQ0FAAOCAgEAXcqBRwu1 - JoeInJvvFBXJK1mn+vqX/jF7FEybBEI4qt8zO38nsqDu/+AWtMsrCcC1SjgZu/wL - b0hjZAbfyK52oyzigv+LUxRI47BTcriKbNVR1tRvPuU013gAyxoXMwiVeDcMXDaT - hy2BfKoewuXSNE+gtCEA2EIu2ecb50+Vj24VhiwyVbrpshc6QOLVwNOL4nkT+bqq - T151LZYPWAL3PjsApVCo9OVgp3+UMcpUHKYD371cFVF/T2+Gx9tqEsnw9EDsI3r3 - UNSDcCuRICviEEugLRRbjq5NKQ1Exl2jMte4y32FYOU9MeS42slYuTczf0Jk1OZT - WrtUQCgK5XWAk6zdOyg5IZb7uIFhEkq+A5rlFevi/OMOloMnNNZnCuBcLJWhIKme - WvzBwBSL8AErsw1ErzzIaAMUnRYMINVmIpjY4Kvo0S9/OPp+R+yt6AmgR7i5Tx+q - ubDBqCtZF//8nRJMsaW0IhhlBZjl8p1WUqyTz4bzX+M7lyRMuP7N4VlrLh/2bCDc - vvpjHjlsqDcTiTNdMuJMgh747Y/kB7g1G2GzQtb+PCPbpUpgXHZedVR1NF566vXx - y6ICDSC0zCLzuLDl9mH1Jf/4uXFa+frb0FMMuHr5/tGPd8LeTVY/N9nwOrra5fPN - op/Jwgf6Qp3PDtdu51Eky3oAk4e/eqNkJLs= - -----END CERTIFICATE----- + -----BEGIN CERTIFICATE----- + MIIGRjCCBC6gAwIBAgIDAvE0MA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB + Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV + BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjEwNzE2MjIyMTMzWhcNMjMwNzE2 + MjIyMTMzWjBjMQswCQYDVQQGEwJBVTEMMAoGA1UECBMDTlNXMQ8wDQYDVQQHEwZT + eWRuZXkxFDASBgNVBAoTC0NBY2VydCBJbmMuMR8wHQYDVQQDExZlbWFpbC5pbmZy + YS5jYWNlcnQub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzyu4 + maECP9uBDeaqV9WDkEHj4YM67yMhenpdvabPV9b7bWXX0EeBmXiEd+8sHKR3cJqn + i2RAnthNJdNYHf0cgJjyhDGAVU5RL1uZMaEbtTIX7jWPbXMp1OX2I8pDtgB5QLAm + Q5sKmXhgH+DCVhxaud5B/CCI6eGfMjxH4fi5+iqSWsopa8Eh6If6pgh1WcFiXu+U + QUa+2oSOwzG+AS16g1guNq+dqQKpGDx+qT4gg/QWrt5/bEhTlZOMUUPi9MoIV5lU + Lqdgkn6Df6DPisT7S7iYrEM3HBLsxxoCT934UP/TN7yaOjgXYLVO59YzltOCAPiK + nqheDAgHTFOqEQjxzY49fr4xHzf7eS4AaZzkM5x65lL7gmCXBKhOgGf5o1uiy90/ + nP1A16QWJZbjFZs/ExwSOqDUMqp2rfxkjE8UCHy2WQeBsOYUrWeDqUMoAlPRDbnM + EYYY+cbddFiorBsT8Pps/qJzp6jYnFK38N+jRY8VkaDfN4L2LIkNv6lpiCt/7QNi + 7+LzFfzaSNkThaF4Gp0feTbzLvuMhMuZevC1MynrYyvCCoSgRPl8WuFvY+Unb4Cy + gjTpf6GIyNmnDFkVrGNX6VEXIJrJA7OmlWN4aKlyeNKpUhKkjAAh+GA72PpD6Hmq + SxFNPKQrVzzToXebo4y48axz6lklSlK8uTgrBh8CAwEAAaOCARAwggEMMAwGA1Ud + EwEB/wQCMAAwDgYDVR0PAQH/BAQDAgOoMDQGA1UdJQQtMCsGCCsGAQUFBwMCBggr + BgEFBQcDAQYJYIZIAYb4QgQBBgorBgEEAYI3CgMDMDMGCCsGAQUFBwEBBCcwJTAj + BggrBgEFBQcwAYYXaHR0cDovL29jc3AuY2FjZXJ0Lm9yZy8wOAYDVR0fBDEwLzAt + oCugKYYnaHR0cDovL2NybC5jYWNlcnQub3JnL2NsYXNzMy1yZXZva2UuY3JsMEcG + A1UdEQRAMD6CFmVtYWlsLmluZnJhLmNhY2VydC5vcmegJAYIKwYBBQUHCAWgGAwW + ZW1haWwuaW5mcmEuY2FjZXJ0Lm9yZzANBgkqhkiG9w0BAQ0FAAOCAgEAXcqBRwu1 + JoeInJvvFBXJK1mn+vqX/jF7FEybBEI4qt8zO38nsqDu/+AWtMsrCcC1SjgZu/wL + b0hjZAbfyK52oyzigv+LUxRI47BTcriKbNVR1tRvPuU013gAyxoXMwiVeDcMXDaT + hy2BfKoewuXSNE+gtCEA2EIu2ecb50+Vj24VhiwyVbrpshc6QOLVwNOL4nkT+bqq + T151LZYPWAL3PjsApVCo9OVgp3+UMcpUHKYD371cFVF/T2+Gx9tqEsnw9EDsI3r3 + UNSDcCuRICviEEugLRRbjq5NKQ1Exl2jMte4y32FYOU9MeS42slYuTczf0Jk1OZT + WrtUQCgK5XWAk6zdOyg5IZb7uIFhEkq+A5rlFevi/OMOloMnNNZnCuBcLJWhIKme + WvzBwBSL8AErsw1ErzzIaAMUnRYMINVmIpjY4Kvo0S9/OPp+R+yt6AmgR7i5Tx+q + ubDBqCtZF//8nRJMsaW0IhhlBZjl8p1WUqyTz4bzX+M7lyRMuP7N4VlrLh/2bCDc + vvpjHjlsqDcTiTNdMuJMgh747Y/kB7g1G2GzQtb+PCPbpUpgXHZedVR1NF566vXx + y6ICDSC0zCLzuLDl9mH1Jf/4uXFa+frb0FMMuHr5/tGPd8LeTVY/N9nwOrra5fPN + op/Jwgf6Qp3PDtdu51Eky3oAk4e/eqNkJLs= + -----END CERTIFICATE----- profiles::cacert_selfservice_api::server_private_key: > - ENC[PKCS7,MIIOPQYJKoZIhvcNAQcDoIIOLjCCDioCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAo+kOuakLJWl4gVaTboTX9JodKuNNtKTTFQk2 - bDFa3brAitjmvnoNsX27+Qi+JCQJ9fuqCI1pkdiWDP6iXB5XORFLXRCUBLCA - 5ZNf2me3u8SYgxOH1yVo7AgDw8J6bYqQwcecTm0y0DkmZgEQBryZJVHe6CPD - 7WqBwJreoYI6z/AMoeG9GAsa4CjziRvBTfbymXYtjO3prssRaCQ0rXHiD6JU - 5a90YZm1U2/VwqwjWpTgYFD05hIHCtyD5PNlB8xd+S9sFRsRkRAFIUXkGIfI - 6fjXHe7Jd5bTxMaKIaZmhuxqf4XEqf2qu0mMd9134XzhHJud5EmnH4HGjuIq - NRvCtDCCDP4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEAWjoyge8WbAplaP - 30tTCheAggzQ1xj7c23DNmkfATMVVBXlMO29wiov/MncD8zumAY+Jp0g+2Y0 - z7sN6TJdcFMWgEf1+6TPtZnIfWJ04TmpnYEaZd74J+xbUqKEakp56A2CdKdP - wf8oiWX5FD2zvU7irXuU6G9k7eCn9K71gNXDrlEw+roKIZskPo1jVhGNRg/U - Hv4WaticAlEv/txJJKCyQOSz4H8msmV13jKa7yLruM96Pm+AzxEk4NaV/DEB - FS2dvDIQYOXaQZfKMNKSgutnaKeUuyw0VeCMY4y5iRkHGIGJ91iy6KmSa2cS - R53o9CMpFcN9LUhMAvNdB8ZIv5qFapndIqjZXa+wSS1ixKoOa/1uXpPcGnDs - drx0N7NeN8J4/TqlkAFm2Ga2ehjxVGCrN37jH6Z3cr9qFF/1x40ujuSaCI9/ - eC3gZNwowQOzqfINkZdXW/MLmAFeKm+2Bznh/syO2cb8n0TK0hncrf6sqA+k - JTCYvwqoTDHiWWkXJ7u5uGTdbIxl1H9LPgJpRqNK7G7BItV0Do20CG+uKEVx - gMlA743kdPjXZ4GbPPtSVbS5iEhfHo0IGVb8mQvNeye32NfT1QsgkNT9NNFK - U2aFiROwYJGYoJ5zcth9HXMLInjfOggdvZM0DLKz65p8Hob5F3sNhZrSyFEm - MEFYS8fsoNVdfmkBZ8JA8nHYOAaUMqmhhFDIn4g3Mnb7kGur+t97C1MzsqOI - lqz8Vdhm3gqL/UKZp2NoPIyH1cTUACtpOXz8nJY25QJdEyhzgkX7UnGCRRuz - Ev8dPZFRxNwuNO2N7ziDijePK9/VT9iK3CKb4gH8l/Zx51x62mUSGXEnNj6b - Wwnde/o3acqGUF6qvyzeBHelDoSEC336zzCRyut0bGJD3P5zgmNYJ9WUQfph - n2FdLv1Ddy9m0o1W+k0AUjKg+/Tfs/0Cw7Ma5EaykRvhP57HyteVCCwJIbhf - Tf+8A3hw7lGwtUcTaclLs9o6JOhMzepWsigr/M1p3Ec/yjhORMCph7uD24UV - cz2sd9BZhPUHi/NpBUt+KlxyRkwZzFfX8yKGzzp9kgO0EOcjKNq2tFfTY6xn - /7Wu6tCp2DPFV/SZUcvF5SYuh2RSNBotj/BcGnY5/V8FACHxHLI2WCKCBHPZ - 5SMx2JXxzg975HO5v6RK8gKiF//znG5u1U3JuS6NhGq90/EbAhhvF+LoCb6E - dyWy1jWWOvrWAOa6nGxP+55wdQUGpgey2bADp9lhPKcAMyJz/VOt16tpmyOJ - 565ykWISRIk3zb9pffTnlJGqC/zEDN2IBydQ5cl7b1wK5pZWLBnL4De/14T0 - 5TWcZOYXd+xBdZtBi83owAWYFts3MD1RCz40FZJRkbj7QPalkDDFR32XQQW3 - oPuxpNPwwUGfv/m/w2sIVeTSD4r6iEnYQreJ9xGHU7shErFjSWbYVeB/6wL+ - Ty4PCPz9JaqDQgECTy7gNBNyw6n3ucVrmIhnEbN6tk3c8ehgWspeDgI9LNfx - hk0fUJLUBEnm/TINGolSdAsQSe/fZcOfq5L26SvSzJFlurFmmkaM5nF9kk06 - cvLqBdHOIEo1uHZYnlU+qETdsFcWo5ZrA8EN0j5s0XxK+yZuVgah3uPZ47XQ - VrYJhaXTfSz0ybjiQRcteuivs/+wii6cfAoM9KZJoRSfNFgBpDvbIIHaWxci - DIFhw1GzPnpB71eeGkjm2XPSf7u23iXTvTUYYVbsaU/z0DjUFz21Y+oKH4zy - oUw0u9qa02Kvhk2YbI3xVDiMTkdd1coNW2wsW0nup8e0iU5epBAC9GV9IE3y - BEhjsV0ojuh4sItlFOdL9/vWqu0rbYZo6ObTXkWUKb+rbVHpj+bX4QyofOoX - BTndKhhtc1k4hVetbiSEG+MnOWSBZQN7CRHJT4/i4s7N21IvHBR2aowR7xNy - FayoipaGffhmJ8IFlevIJytCfc0/2vlRZ3h0pib6K8UaVqNMqkdlMGpSmYfH - M+SzqDTQhP52Rrsw7TVI8luE+j3G56XkLIzIsFeCN0ImV+LkwZ4xC8kurWs6 - HqioS5xeiZJupMs/YKek37sUuy/1ODL2t30JbHaPLRffvlb6H3eJoQ6qFVI2 - YzjwLWGWotrMduOONpnabSk/466dDgMmew7wANuTqPuD37uf34tqNVrAcmLi - +Nh2Cl6fve/ESlptDMDDN6ThpXXIH0+OAOYBQlqFu5VTfJth4/g8k6LJBDRK - I4ulySlVeENgQKTXvzcUpOo27xfdm4X9O4xU6CqOvtvirSuYzIodrEY821/F - ZCBteES9JcHiBlwB3ku6BUJuIfUqWajafVHyc2iHdTylO3PfoogATomG44gX - zOWsY0hM4WMV7bv50cGBVVZT9xzFoWdKBg9zn6dflMS4DapdrRaCiZ24YnRA - RElTOthV4a4nX6dlbPHXnb2kVSvQD3sIMKGwI51nnESoU9hKXnaKnkMNkmVg - sUDri3G52aJ3Plqy62x62DMQoHEkNriolK5nX+kNw/Yg/wNje6rQ4SvEkjCf - 8VNsC/flbh6T/dP2C4uXoC+AwxCGx5l97WQWwrJ8Xwiuj1f0a0O7dv55ZbJw - AkwQRf6NHkWorekw+84wY6IOAQ3nK/vFj2A/Th6iszdNxu3i4MrxmTw/YWw4 - eDgqV4nKAq2wz1q8xH5p8kjwcY46w088kHJoHllyheLhRlvaLsfIWKdHeHEa - aImSDrcOE/jjqjR7e8VOiP8Vjyc1NaxWQvHrFQW/X+MfcWvQdJ2p/oEwCQDE - mUZPJcddWqI9AamHlA/CsKJ56jqwqz4bGJMlqMqfAbdV8xDlWr9tbDnWectn - a8LwX4FXe0iMCpR4umBDtlFo23N8g6FRt9WZyBTBSoZlZ2Xp/UFO8TqEG3Ol - gVH3i9R7Set6o36kdhIUKSvsXt8vvO91HmNUmk24nhzQRwxrkL40RxrZh67O - RqwBWVTSW3xBaSz1RnVAmN6FxRL+qLWt5O4RYK4I9YgxZW+PQzVdyVzpUZGm - Q/GP9TcZN3723AhFy2tbRfEr/eHhlaSEB6ZuFMGkQ7ROn5RNdbwqex6B/wg8 - x+y1RFOkEILgPtyJR/z5allWhaLbjuj5Czq9DqICp/Oy+HTAd17ETtTpbI7L - HtASYiwnv+tmxJQ2WBiqz6cZ78M6W+Zz3UN2uSr6Gquq/Jq+Y+BhjPbV+6Cv - pttMCZj60nRC+vCsJnl/SAZiiZe+y3VfFJnktwWiinjgaUSIF/IXZmUdN8Vz - MTFPWzMrx/Hhgng8M+sGRwuqNbtYe+Ug4hmGVNNbnE55SN2+6eoZz3Y3WIFC - ovXxxhpBvf5IVEVvYHnTSEFI5F/XNZBKktMjqQf8DAFP89EfzRz98Gg0MEif - RIoVNidxZREmoQ9DaEyIH/1CAopLVgcu8zS1jU8MPWY/B37vgTvkiY0YobyS - aDlus2SMdULymGfg//L99rq0R6a9NhH7UxuXqeUWznHwGijnyybUfDAsfIwp - LXoxmpT9ufn1pvOE9TYsPJxyJcv7QZq2EVR3nL/4l2O2NxUzJWtykXrKbBia - oBFSDXhotMd0w6uh4eS13BWb6HqHjReD7w+6exPQ5uZIf1RBxAmSke2+tAg3 - hCHf8i2uRwA6DnBNgm0ORmuI+RTh9tCM0nRcDpusLwPbFk3UHgvE0W7bxb3h - WchznGDUCgqKH9KWbC4RPFI7zCDjE0I1k1Fpc9T0qfGyjIA5Hc7KVWsl42v+ - NVsFdzN3RZRfv67NQxhl8RoniXF1sWin5XcUN+tNbB7cvCPj8sj4bU8rrQao - +c1R01exRvMHA13ry3haQj3rKX8T+e6QgqAlOfdnst+UpE2DBtaDJwReQBjf - 3wePiQ2CN+tvdK89qzdIr6CLnuzSFNP+ZLpJhiP1fKV85Dnoqe1TSqFCSAR1 - RVBsC17ZXkM6px76IcrOqjgLJmwxfAa5VyylkXsOon6UJ3l1EDDGk2KrKyOT - iHugNXTY6azUF+G3ASWs4lBlEHn6FDYuXOCd18zGKnUYU0Ql/f0SdCTwg2Vl - 8GErdo0GMqcz2FUBvlRy1Ydt1nM+AOHb2GbciaD876/VTebUlPGiCOhtYNop - qnH/BCrm60ulv8l9y69E/9gclWuzJxNJEAChxPpbzV+sSgbPK+BDEey18aGo - YqD+7VGmz1yPxOdgUANFgJeWIksafJFRTrNZWeDYJa9Iu1ZMLk31+O6gJ68Y - lZjHjGommjPd+hKL+TG72k2XDqPNDfE7JQMoDwa/rKQeSzvf/j4rep6N75pQ - huAu6YafNhB8IBwK4oljoITzHVxzpCAP/Pis44IKOkbj4/HWQmJH/IQXmMEl - /02OqZvJJOgkpUGYrsJud+ZAATIhpZwb8JfQMw6mes/6aPdGCZjMJaHPgFjU - h6Q0uA==] + ENC[PKCS7,MIIOPQYJKoZIhvcNAQcDoIIOLjCCDioCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAo+kOuakLJWl4gVaTboTX9JodKuNNtKTTFQk2 + bDFa3brAitjmvnoNsX27+Qi+JCQJ9fuqCI1pkdiWDP6iXB5XORFLXRCUBLCA + 5ZNf2me3u8SYgxOH1yVo7AgDw8J6bYqQwcecTm0y0DkmZgEQBryZJVHe6CPD + 7WqBwJreoYI6z/AMoeG9GAsa4CjziRvBTfbymXYtjO3prssRaCQ0rXHiD6JU + 5a90YZm1U2/VwqwjWpTgYFD05hIHCtyD5PNlB8xd+S9sFRsRkRAFIUXkGIfI + 6fjXHe7Jd5bTxMaKIaZmhuxqf4XEqf2qu0mMd9134XzhHJud5EmnH4HGjuIq + NRvCtDCCDP4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEAWjoyge8WbAplaP + 30tTCheAggzQ1xj7c23DNmkfATMVVBXlMO29wiov/MncD8zumAY+Jp0g+2Y0 + z7sN6TJdcFMWgEf1+6TPtZnIfWJ04TmpnYEaZd74J+xbUqKEakp56A2CdKdP + wf8oiWX5FD2zvU7irXuU6G9k7eCn9K71gNXDrlEw+roKIZskPo1jVhGNRg/U + Hv4WaticAlEv/txJJKCyQOSz4H8msmV13jKa7yLruM96Pm+AzxEk4NaV/DEB + FS2dvDIQYOXaQZfKMNKSgutnaKeUuyw0VeCMY4y5iRkHGIGJ91iy6KmSa2cS + R53o9CMpFcN9LUhMAvNdB8ZIv5qFapndIqjZXa+wSS1ixKoOa/1uXpPcGnDs + drx0N7NeN8J4/TqlkAFm2Ga2ehjxVGCrN37jH6Z3cr9qFF/1x40ujuSaCI9/ + eC3gZNwowQOzqfINkZdXW/MLmAFeKm+2Bznh/syO2cb8n0TK0hncrf6sqA+k + JTCYvwqoTDHiWWkXJ7u5uGTdbIxl1H9LPgJpRqNK7G7BItV0Do20CG+uKEVx + gMlA743kdPjXZ4GbPPtSVbS5iEhfHo0IGVb8mQvNeye32NfT1QsgkNT9NNFK + U2aFiROwYJGYoJ5zcth9HXMLInjfOggdvZM0DLKz65p8Hob5F3sNhZrSyFEm + MEFYS8fsoNVdfmkBZ8JA8nHYOAaUMqmhhFDIn4g3Mnb7kGur+t97C1MzsqOI + lqz8Vdhm3gqL/UKZp2NoPIyH1cTUACtpOXz8nJY25QJdEyhzgkX7UnGCRRuz + Ev8dPZFRxNwuNO2N7ziDijePK9/VT9iK3CKb4gH8l/Zx51x62mUSGXEnNj6b + Wwnde/o3acqGUF6qvyzeBHelDoSEC336zzCRyut0bGJD3P5zgmNYJ9WUQfph + n2FdLv1Ddy9m0o1W+k0AUjKg+/Tfs/0Cw7Ma5EaykRvhP57HyteVCCwJIbhf + Tf+8A3hw7lGwtUcTaclLs9o6JOhMzepWsigr/M1p3Ec/yjhORMCph7uD24UV + cz2sd9BZhPUHi/NpBUt+KlxyRkwZzFfX8yKGzzp9kgO0EOcjKNq2tFfTY6xn + /7Wu6tCp2DPFV/SZUcvF5SYuh2RSNBotj/BcGnY5/V8FACHxHLI2WCKCBHPZ + 5SMx2JXxzg975HO5v6RK8gKiF//znG5u1U3JuS6NhGq90/EbAhhvF+LoCb6E + dyWy1jWWOvrWAOa6nGxP+55wdQUGpgey2bADp9lhPKcAMyJz/VOt16tpmyOJ + 565ykWISRIk3zb9pffTnlJGqC/zEDN2IBydQ5cl7b1wK5pZWLBnL4De/14T0 + 5TWcZOYXd+xBdZtBi83owAWYFts3MD1RCz40FZJRkbj7QPalkDDFR32XQQW3 + oPuxpNPwwUGfv/m/w2sIVeTSD4r6iEnYQreJ9xGHU7shErFjSWbYVeB/6wL+ + Ty4PCPz9JaqDQgECTy7gNBNyw6n3ucVrmIhnEbN6tk3c8ehgWspeDgI9LNfx + hk0fUJLUBEnm/TINGolSdAsQSe/fZcOfq5L26SvSzJFlurFmmkaM5nF9kk06 + cvLqBdHOIEo1uHZYnlU+qETdsFcWo5ZrA8EN0j5s0XxK+yZuVgah3uPZ47XQ + VrYJhaXTfSz0ybjiQRcteuivs/+wii6cfAoM9KZJoRSfNFgBpDvbIIHaWxci + DIFhw1GzPnpB71eeGkjm2XPSf7u23iXTvTUYYVbsaU/z0DjUFz21Y+oKH4zy + oUw0u9qa02Kvhk2YbI3xVDiMTkdd1coNW2wsW0nup8e0iU5epBAC9GV9IE3y + BEhjsV0ojuh4sItlFOdL9/vWqu0rbYZo6ObTXkWUKb+rbVHpj+bX4QyofOoX + BTndKhhtc1k4hVetbiSEG+MnOWSBZQN7CRHJT4/i4s7N21IvHBR2aowR7xNy + FayoipaGffhmJ8IFlevIJytCfc0/2vlRZ3h0pib6K8UaVqNMqkdlMGpSmYfH + M+SzqDTQhP52Rrsw7TVI8luE+j3G56XkLIzIsFeCN0ImV+LkwZ4xC8kurWs6 + HqioS5xeiZJupMs/YKek37sUuy/1ODL2t30JbHaPLRffvlb6H3eJoQ6qFVI2 + YzjwLWGWotrMduOONpnabSk/466dDgMmew7wANuTqPuD37uf34tqNVrAcmLi + +Nh2Cl6fve/ESlptDMDDN6ThpXXIH0+OAOYBQlqFu5VTfJth4/g8k6LJBDRK + I4ulySlVeENgQKTXvzcUpOo27xfdm4X9O4xU6CqOvtvirSuYzIodrEY821/F + ZCBteES9JcHiBlwB3ku6BUJuIfUqWajafVHyc2iHdTylO3PfoogATomG44gX + zOWsY0hM4WMV7bv50cGBVVZT9xzFoWdKBg9zn6dflMS4DapdrRaCiZ24YnRA + RElTOthV4a4nX6dlbPHXnb2kVSvQD3sIMKGwI51nnESoU9hKXnaKnkMNkmVg + sUDri3G52aJ3Plqy62x62DMQoHEkNriolK5nX+kNw/Yg/wNje6rQ4SvEkjCf + 8VNsC/flbh6T/dP2C4uXoC+AwxCGx5l97WQWwrJ8Xwiuj1f0a0O7dv55ZbJw + AkwQRf6NHkWorekw+84wY6IOAQ3nK/vFj2A/Th6iszdNxu3i4MrxmTw/YWw4 + eDgqV4nKAq2wz1q8xH5p8kjwcY46w088kHJoHllyheLhRlvaLsfIWKdHeHEa + aImSDrcOE/jjqjR7e8VOiP8Vjyc1NaxWQvHrFQW/X+MfcWvQdJ2p/oEwCQDE + mUZPJcddWqI9AamHlA/CsKJ56jqwqz4bGJMlqMqfAbdV8xDlWr9tbDnWectn + a8LwX4FXe0iMCpR4umBDtlFo23N8g6FRt9WZyBTBSoZlZ2Xp/UFO8TqEG3Ol + gVH3i9R7Set6o36kdhIUKSvsXt8vvO91HmNUmk24nhzQRwxrkL40RxrZh67O + RqwBWVTSW3xBaSz1RnVAmN6FxRL+qLWt5O4RYK4I9YgxZW+PQzVdyVzpUZGm + Q/GP9TcZN3723AhFy2tbRfEr/eHhlaSEB6ZuFMGkQ7ROn5RNdbwqex6B/wg8 + x+y1RFOkEILgPtyJR/z5allWhaLbjuj5Czq9DqICp/Oy+HTAd17ETtTpbI7L + HtASYiwnv+tmxJQ2WBiqz6cZ78M6W+Zz3UN2uSr6Gquq/Jq+Y+BhjPbV+6Cv + pttMCZj60nRC+vCsJnl/SAZiiZe+y3VfFJnktwWiinjgaUSIF/IXZmUdN8Vz + MTFPWzMrx/Hhgng8M+sGRwuqNbtYe+Ug4hmGVNNbnE55SN2+6eoZz3Y3WIFC + ovXxxhpBvf5IVEVvYHnTSEFI5F/XNZBKktMjqQf8DAFP89EfzRz98Gg0MEif + RIoVNidxZREmoQ9DaEyIH/1CAopLVgcu8zS1jU8MPWY/B37vgTvkiY0YobyS + aDlus2SMdULymGfg//L99rq0R6a9NhH7UxuXqeUWznHwGijnyybUfDAsfIwp + LXoxmpT9ufn1pvOE9TYsPJxyJcv7QZq2EVR3nL/4l2O2NxUzJWtykXrKbBia + oBFSDXhotMd0w6uh4eS13BWb6HqHjReD7w+6exPQ5uZIf1RBxAmSke2+tAg3 + hCHf8i2uRwA6DnBNgm0ORmuI+RTh9tCM0nRcDpusLwPbFk3UHgvE0W7bxb3h + WchznGDUCgqKH9KWbC4RPFI7zCDjE0I1k1Fpc9T0qfGyjIA5Hc7KVWsl42v+ + NVsFdzN3RZRfv67NQxhl8RoniXF1sWin5XcUN+tNbB7cvCPj8sj4bU8rrQao + +c1R01exRvMHA13ry3haQj3rKX8T+e6QgqAlOfdnst+UpE2DBtaDJwReQBjf + 3wePiQ2CN+tvdK89qzdIr6CLnuzSFNP+ZLpJhiP1fKV85Dnoqe1TSqFCSAR1 + RVBsC17ZXkM6px76IcrOqjgLJmwxfAa5VyylkXsOon6UJ3l1EDDGk2KrKyOT + iHugNXTY6azUF+G3ASWs4lBlEHn6FDYuXOCd18zGKnUYU0Ql/f0SdCTwg2Vl + 8GErdo0GMqcz2FUBvlRy1Ydt1nM+AOHb2GbciaD876/VTebUlPGiCOhtYNop + qnH/BCrm60ulv8l9y69E/9gclWuzJxNJEAChxPpbzV+sSgbPK+BDEey18aGo + YqD+7VGmz1yPxOdgUANFgJeWIksafJFRTrNZWeDYJa9Iu1ZMLk31+O6gJ68Y + lZjHjGommjPd+hKL+TG72k2XDqPNDfE7JQMoDwa/rKQeSzvf/j4rep6N75pQ + huAu6YafNhB8IBwK4oljoITzHVxzpCAP/Pis44IKOkbj4/HWQmJH/IQXmMEl + /02OqZvJJOgkpUGYrsJud+ZAATIhpZwb8JfQMw6mes/6aPdGCZjMJaHPgFjU + h6Q0uA==] profiles::nginx_revproxy::virtual_hosts: 'community.cacert.org': target: http://10.0.0.116/ diff --git a/hieradata/nodes/emailout.yaml b/hieradata/nodes/emailout.yaml index 786796c..053ae32 100644 --- a/hieradata/nodes/emailout.yaml +++ b/hieradata/nodes/emailout.yaml @@ -6,16 +6,16 @@ profiles::base::admins: - law - jselzer profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAZIzEQy+6GH01XZC/CDjTYDy/cMYuu5gD+M8p - j7Y+QHXLPCJ721S/+PyWcQy8eqlPDMiz5Mnu4TdCfodys4VgnCTUj3vh7DKM - F3cI0xkoEB7tBEXAnCQqPYaYa+KO/fj+kvdswghrnVaiSOiVA6rTGAS0q8/d - bxXRplqykmKpIapqKcc5vWy1Tzw/MgEGa0jJsKeAQYK4XW7/RzmV46OODTfI - kF/A0mGIPHF6wKf6gPwcWNXIt7uUtKIzFn9UYLA6kRnO3PMTNZJtmopj0dYZ - d3Q8+Fnn1j5euYNtt87YN4NcBYBmoNW61GcK+22sks60DrdiILipuhdvcm1H - x8gwbDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBZLIN+Jx5fPCvJaclk - h87LgDDL8p9rEfdTEtFIy1rREoqV9TIRLiByXGaiTjo/vWU8sojsGZ1OCJKd - RStsSa5Pjok=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAZIzEQy+6GH01XZC/CDjTYDy/cMYuu5gD+M8p + j7Y+QHXLPCJ721S/+PyWcQy8eqlPDMiz5Mnu4TdCfodys4VgnCTUj3vh7DKM + F3cI0xkoEB7tBEXAnCQqPYaYa+KO/fj+kvdswghrnVaiSOiVA6rTGAS0q8/d + bxXRplqykmKpIapqKcc5vWy1Tzw/MgEGa0jJsKeAQYK4XW7/RzmV46OODTfI + kF/A0mGIPHF6wKf6gPwcWNXIt7uUtKIzFn9UYLA6kRnO3PMTNZJtmopj0dYZ + d3Q8+Fnn1j5euYNtt87YN4NcBYBmoNW61GcK+22sks60DrdiILipuhdvcm1H + x8gwbDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBZLIN+Jx5fPCvJaclk + h87LgDDL8p9rEfdTEtFIy1rREoqV9TIRLiByXGaiTjo/vWU8sojsGZ1OCJKd + RStsSa5Pjok=] profiles::x509cert_common::certificates: 'emailout.cacert.org': certificate: | diff --git a/hieradata/nodes/extmon.yaml b/hieradata/nodes/extmon.yaml index c25626e..dd79b75 100644 --- a/hieradata/nodes/extmon.yaml +++ b/hieradata/nodes/extmon.yaml @@ -5,118 +5,117 @@ profiles::base::admins: - jandd profiles::base::is_external: true profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAKkrkXNGDfVW85jlLRp7t1KsHr7fzVZUOiKgI - nXxfq7bf6YceZhwDM4h02X4ch+amxI/q3jvrrjgUAGLY0D5zonWNbA7T8zps - fogr5FhzJzS47iQbHDyTmU55xOCjfujvdoUtiBLpeh1IZ8DR5fOgMqpt9Y4M - LnSVsh5cnWdWlYq1/sdG7hm70QzTYZMVy3noNSfVPeGJRx0iTDpyvEhfV8+P - NxAzNKpcmIf2UGUq7MxaAyjcayfpDwYXvH48o72vzvreY3KbCkBe8eBtmmGr - beIWk3uF1/HGex0nMJLGKV57NdSrKz8I7moYp5pGhr70W2SoQFW9EHH6RSNm - IdVtKzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAZdHtu1JgImxyR3tiB - 9Iz7gDAdG7RekYIvLTmxoQxapU0ATmqM8lsDrFs1fy8LRz4T921fD8FqiC7x - EEWxfzNn0ZI=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAKkrkXNGDfVW85jlLRp7t1KsHr7fzVZUOiKgI + nXxfq7bf6YceZhwDM4h02X4ch+amxI/q3jvrrjgUAGLY0D5zonWNbA7T8zps + fogr5FhzJzS47iQbHDyTmU55xOCjfujvdoUtiBLpeh1IZ8DR5fOgMqpt9Y4M + LnSVsh5cnWdWlYq1/sdG7hm70QzTYZMVy3noNSfVPeGJRx0iTDpyvEhfV8+P + NxAzNKpcmIf2UGUq7MxaAyjcayfpDwYXvH48o72vzvreY3KbCkBe8eBtmmGr + beIWk3uF1/HGex0nMJLGKV57NdSrKz8I7moYp5pGhr70W2SoQFW9EHH6RSNm + IdVtKzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAZdHtu1JgImxyR3tiB + 9Iz7gDAdG7RekYIvLTmxoQxapU0ATmqM8lsDrFs1fy8LRz4T921fD8FqiC7x + EEWxfzNn0ZI=] profiles::icinga2_certificates::certificates: - - - name: extmon_client + - name: extmon_client key: > - ENC[PKCS7,MIILLQYJKoZIhvcNAQcDoIILHjCCCxoCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAG1qZ5pPhQAQv9ghCMKaDPplIln6/YnO2/qvH - 93vQPs5MMxuX43jlio12HyakQ2S9pn7EjQFd+rRKNMwIw84472DgpXrvZq9z - hmIVar+2Tg15+7cWcPf2jGGmLesCH95o1v4uV667fXrUbOCowMQfG+4zGsnV - Qo+n9pe3CnvK0HyDNDj1Sd7+mjum6cSUbt9pnXZy7G+Q4XYzu+So1CoKmhdY - c8pz/o48ALeOjPT5DOIni87b/rOtclldATQtgtksE8CCA5jC/hIk3LaMh9wi - J15NKxy29U/zoMLsWfYQn1/5aIgHuPeV85lz5Eiglue+rCxikpmfsx+L+ZPM - G8/zBjCCCe4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEA1+ZW6MTau1jUPA - FrfiXqSAggnATj/0QSn1fjaYvsQJH9dV3imq+vh7+scp7sFAzzwEKMOABaFm - hgUPQQjuJ/CD/AYTdarGMqI860D3vDE48RoqFSxW57FB3ZAqANigzZg0k+TY - X82r1Yq6qdZ6StuiokU97OHFbKd68i7Ibf0nm4XhaZ8JKvti+xKpJxaLY5iL - KGcCIQbZE7QOmlpIDEUFYdVX9jbV+9NJNo8F7jmSvT7ZI1gU46PapPoRKQun - +Ka8Fw3BncTx14IoqDJgzfXpdqLLB8sXEcCbUF4uLBcFi76dkw2be93x32RZ - UoajUlY4q4OFbGrtQSEvQ2uEI5iI6UmPnN6u333ddmH5NvW7Iu+pCc122v4b - VKR0DBGhsasvKNyxnIk5u7cYV6azG6tKTTsYoNMkiBqgEGuLr6FtZKyaqtri - HYGq/tiq8AWlMtl9hSEKHePwng5RDiRZu3K1Ux4m93sf7dyw0PrQxv34OlxS - QMDJeMqmUMyF9iwDCs9h1YWgHlSpUbtpw9CiVJMu6mzxjNBIwnKfhq5L+nCQ - c4nDXkzvYQN/KA4wUl/+76IPKo2fSLWtkbwOPDCmjojbSIacIORgzl9zuA2t - j8n7QDPtFxEoC3Hj36XlYQlPITwGb0Gu6DhIOYt5rYo7IjNGglSyK6OfFFOb - WiSmaJaUCrpCWpgaASOZdLFzo6oav7WDj74yyiV+eLziTqSnn6caBJ6eKrXh - Fjue4rwqNX4fF8P4iu0NoxJDkiK3DsDRPHpRpJM8LLIKgiROJccWrOX8O0Uk - xlLyMI97r4vnX9R2pHPSGfsA1OwJHOKPC+dld9edFzuqy/Wt9MAQI6xyYs1V - kGjHA1DGxDHCMTaOUm3gJ3CZg4FU0A7RuqUjNCXHydCfE4kv069xVgfvfOFt - Y/dEnON+iJYtWjmAr2nYkDHYfD/l998W0W7D2DuvhzhtYZsR8A9dwWal8vhQ - e2rh+Rev33DiuC4GfOFXY3BBEsDjcOeRu7SnN43ffkFwnc3cS43oaFwF7Qte - 6NkwvmXgV6vguDSSLdcUtvjkiog4PlgIRLiEyxhmA37yLNhn58r8KnY4+GX6 - ELGwbWY/Tkx42EGbiidTUD2Mudg8O6lOyThQo7u0p2fxw4v8jhI6HxUmWbXr - hVlivhznMuFjleU3BFPEO/U2p4CjiwBoLnsJ78f8EOGurS1bA6nAZoFKdzS+ - IkpXNrwlXZY1TiTUpxTjJQOJi6kmiDsM4JlqwghfOmn2HVC0CFMgq1BQMJCq - E3pzAWBLNydJXlCQKr+jn+ddKjEK6Lbi9ksnltfrru93ieU25+aCNwiPd2EV - NCC6Z+KPBJykt2CEcuDggK284qBLdzOTZEF5B30tPlRnoJAAC3YfwCTktqp2 - ej71uEjEXrm9iZX6EQmVJojjjIkWeASmmB7rR/wMVsMwG0Pcz2xgtvKQ2pQm - wXaZcbBQPuyMDuvZQFCmU+3fbs5N38gw2QSqklmH/vKdzFP3h81ZSnnhrE1P - VlPnsSjgsuoj0DEP7LFQ6AbkMOquwnwidQpYZQlRLP9tX6wzSS9d3pTwcqkK - KlYMYDXQF1acQM0DC2dEX9NzwqPbeWEbe/8HrRdMc2B2pc1GXJcHmQEkOP8m - 3FNCU5uqJVzmRVL2aFJfTPhgb7zzOWdzwTHDJ+4PKGFu6ILbYsztkAgLYAOS - I2tlOYd7D/WJT/n+rO0QWd4I1GbS2kK5IYMMexRgi7DhpvRCh92qJMgPCcoc - /0kVHE/u/TLxgJ7qcPjUDfYGir3Bhna/3G3LCZDZ8Kw921iosVVTYAnoIa5P - G7Bm2guZv1o8QerMxTdHxEBmT/pEYpKvl9BrTmTZcMPfxInhfVCAyspCTBI5 - 0zC+QNrppDweVzaFoFyjk1Taf5/1dzUkQstUyhP+uJ8Hq2d7pvBjiVXRnRB0 - juQ3zNtwXxOGE+jBZCNC5xWL/5ooT5yclBRo7typGI/NLIm8EW9Dr60T9elE - s8dtTDROf5Mitd3ZPyBKe2qc7OvzTey5IbiIFYPIVzt696vrm689uw4Cl8Vy - 5Jqb3kFNtgfZEZW4wnidxoBGwqMPVRFWbpHNSvPnS9HW2u6y6SGs2nuWZvcu - lB+J5TNVeAzPw81OELhZZEmAOX/rcL/oMvAudUJlRFYVZY4z+tvFLbDP9Hzi - Do9ykUApp9ljQ1XQNDyKIISv/jJKEEy16rb7HhdSs8uwtZ6mPD1QaNq8uO5b - FZY4c7R3EJue5n6mpGJ97Z2QijnEh5NNw9Yt10K6WES3/7JBDjt0OjQCnbaF - 64garOvcHKzbpLhHhJtQ6vjxAKV1Q+HzVohOJKDZBJDP8f8xDIwXfVjVMlx8 - pjLQ6pjIaYKD8beKyJMd2IHrXb8IUs0AQIKHL6dGH4pgYZ+Wr9VVktCf1GR3 - 2IB4j8b3lJ4AjqTuGWrVAoxH4FkV8J4mJOq34RkE3V0REnurIodjZKL1LW1Y - CKzgIi6TUlZNFRBn3+/PLPnHOF0SXOgbiQv1ikLReZGkDeBAx5Jieb70ewIz - eawLyRRtwInmrOV4ajszSfarYRkh8ulN6AwcF8AVJt2cxx2iXcMoEHQBbcVs - VT+MxTfLRde61Nc6lMWyfsjkvptIyLc7MkErrPYXo/psJGwvjJw70TEHiKLQ - Y+X/hZ7ESj26bu1oiBGGD+4v6CMo4qa3RnKcvHyMbdgNccFbWQktZ0kjvQGA - MWoz/8jdz61tA+tlokM3ZEkWclrJEcyQG8N1gYM/ER9pZBuM6PWZZvp4Yfxw - F5Beu2pgJ1HlKaePwtm3itVPwuIm7K57YEyY76912L+GYiAPpvXt3B7ijCiX - kpHTUw9U2yq2R2zT1zgVePUA2pa379QmBnH1pwzfOzlU+4zli2qSlBTJAibR - LW1afjWaarigdwbDkuxVVinB/SM/U/7jQgXnCQIeVmteW2crwvH/rtfYCmja - ffmJCCsjwDL908TcpJGTFtHxKyGrseMWSqgjlQw1mqmbOU//8DXzNUIn/AJj - p/h7NmRwDQbDnmoZApNGrd9ZiNzlO/nxCD561qD4FPOmSRAIJhQuFjTfompM - U3gNYE4cGPlbBHP9O1YHWfbjWNRqgZHYa772yEJ20+4HIa0lcNOCjCqm/NPB - 7Irj881O9z/hZRWLpHW/MAtesZNe8XDjgXAs5gsYmsYHBlZZ/dP6Pwz0qIO/ - V8FVDMyMLDkJMgAKHr7F+DMzCPOsA56mdPqhHnhTIKIpBTW0R2wPWMomVg7c - vTtI+ddYRIYMdBMgaWN0z9IRWR1PFlQ6aTVGdxTBJ4gf5k8ITtjdykssa1dS - 8ObTnGjMEyiHGlJmK6cm/EYXmOOj8p2HPoBQrqSk] + ENC[PKCS7,MIILLQYJKoZIhvcNAQcDoIILHjCCCxoCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAG1qZ5pPhQAQv9ghCMKaDPplIln6/YnO2/qvH + 93vQPs5MMxuX43jlio12HyakQ2S9pn7EjQFd+rRKNMwIw84472DgpXrvZq9z + hmIVar+2Tg15+7cWcPf2jGGmLesCH95o1v4uV667fXrUbOCowMQfG+4zGsnV + Qo+n9pe3CnvK0HyDNDj1Sd7+mjum6cSUbt9pnXZy7G+Q4XYzu+So1CoKmhdY + c8pz/o48ALeOjPT5DOIni87b/rOtclldATQtgtksE8CCA5jC/hIk3LaMh9wi + J15NKxy29U/zoMLsWfYQn1/5aIgHuPeV85lz5Eiglue+rCxikpmfsx+L+ZPM + G8/zBjCCCe4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEA1+ZW6MTau1jUPA + FrfiXqSAggnATj/0QSn1fjaYvsQJH9dV3imq+vh7+scp7sFAzzwEKMOABaFm + hgUPQQjuJ/CD/AYTdarGMqI860D3vDE48RoqFSxW57FB3ZAqANigzZg0k+TY + X82r1Yq6qdZ6StuiokU97OHFbKd68i7Ibf0nm4XhaZ8JKvti+xKpJxaLY5iL + KGcCIQbZE7QOmlpIDEUFYdVX9jbV+9NJNo8F7jmSvT7ZI1gU46PapPoRKQun + +Ka8Fw3BncTx14IoqDJgzfXpdqLLB8sXEcCbUF4uLBcFi76dkw2be93x32RZ + UoajUlY4q4OFbGrtQSEvQ2uEI5iI6UmPnN6u333ddmH5NvW7Iu+pCc122v4b + VKR0DBGhsasvKNyxnIk5u7cYV6azG6tKTTsYoNMkiBqgEGuLr6FtZKyaqtri + HYGq/tiq8AWlMtl9hSEKHePwng5RDiRZu3K1Ux4m93sf7dyw0PrQxv34OlxS + QMDJeMqmUMyF9iwDCs9h1YWgHlSpUbtpw9CiVJMu6mzxjNBIwnKfhq5L+nCQ + c4nDXkzvYQN/KA4wUl/+76IPKo2fSLWtkbwOPDCmjojbSIacIORgzl9zuA2t + j8n7QDPtFxEoC3Hj36XlYQlPITwGb0Gu6DhIOYt5rYo7IjNGglSyK6OfFFOb + WiSmaJaUCrpCWpgaASOZdLFzo6oav7WDj74yyiV+eLziTqSnn6caBJ6eKrXh + Fjue4rwqNX4fF8P4iu0NoxJDkiK3DsDRPHpRpJM8LLIKgiROJccWrOX8O0Uk + xlLyMI97r4vnX9R2pHPSGfsA1OwJHOKPC+dld9edFzuqy/Wt9MAQI6xyYs1V + kGjHA1DGxDHCMTaOUm3gJ3CZg4FU0A7RuqUjNCXHydCfE4kv069xVgfvfOFt + Y/dEnON+iJYtWjmAr2nYkDHYfD/l998W0W7D2DuvhzhtYZsR8A9dwWal8vhQ + e2rh+Rev33DiuC4GfOFXY3BBEsDjcOeRu7SnN43ffkFwnc3cS43oaFwF7Qte + 6NkwvmXgV6vguDSSLdcUtvjkiog4PlgIRLiEyxhmA37yLNhn58r8KnY4+GX6 + ELGwbWY/Tkx42EGbiidTUD2Mudg8O6lOyThQo7u0p2fxw4v8jhI6HxUmWbXr + hVlivhznMuFjleU3BFPEO/U2p4CjiwBoLnsJ78f8EOGurS1bA6nAZoFKdzS+ + IkpXNrwlXZY1TiTUpxTjJQOJi6kmiDsM4JlqwghfOmn2HVC0CFMgq1BQMJCq + E3pzAWBLNydJXlCQKr+jn+ddKjEK6Lbi9ksnltfrru93ieU25+aCNwiPd2EV + NCC6Z+KPBJykt2CEcuDggK284qBLdzOTZEF5B30tPlRnoJAAC3YfwCTktqp2 + ej71uEjEXrm9iZX6EQmVJojjjIkWeASmmB7rR/wMVsMwG0Pcz2xgtvKQ2pQm + wXaZcbBQPuyMDuvZQFCmU+3fbs5N38gw2QSqklmH/vKdzFP3h81ZSnnhrE1P + VlPnsSjgsuoj0DEP7LFQ6AbkMOquwnwidQpYZQlRLP9tX6wzSS9d3pTwcqkK + KlYMYDXQF1acQM0DC2dEX9NzwqPbeWEbe/8HrRdMc2B2pc1GXJcHmQEkOP8m + 3FNCU5uqJVzmRVL2aFJfTPhgb7zzOWdzwTHDJ+4PKGFu6ILbYsztkAgLYAOS + I2tlOYd7D/WJT/n+rO0QWd4I1GbS2kK5IYMMexRgi7DhpvRCh92qJMgPCcoc + /0kVHE/u/TLxgJ7qcPjUDfYGir3Bhna/3G3LCZDZ8Kw921iosVVTYAnoIa5P + G7Bm2guZv1o8QerMxTdHxEBmT/pEYpKvl9BrTmTZcMPfxInhfVCAyspCTBI5 + 0zC+QNrppDweVzaFoFyjk1Taf5/1dzUkQstUyhP+uJ8Hq2d7pvBjiVXRnRB0 + juQ3zNtwXxOGE+jBZCNC5xWL/5ooT5yclBRo7typGI/NLIm8EW9Dr60T9elE + s8dtTDROf5Mitd3ZPyBKe2qc7OvzTey5IbiIFYPIVzt696vrm689uw4Cl8Vy + 5Jqb3kFNtgfZEZW4wnidxoBGwqMPVRFWbpHNSvPnS9HW2u6y6SGs2nuWZvcu + lB+J5TNVeAzPw81OELhZZEmAOX/rcL/oMvAudUJlRFYVZY4z+tvFLbDP9Hzi + Do9ykUApp9ljQ1XQNDyKIISv/jJKEEy16rb7HhdSs8uwtZ6mPD1QaNq8uO5b + FZY4c7R3EJue5n6mpGJ97Z2QijnEh5NNw9Yt10K6WES3/7JBDjt0OjQCnbaF + 64garOvcHKzbpLhHhJtQ6vjxAKV1Q+HzVohOJKDZBJDP8f8xDIwXfVjVMlx8 + pjLQ6pjIaYKD8beKyJMd2IHrXb8IUs0AQIKHL6dGH4pgYZ+Wr9VVktCf1GR3 + 2IB4j8b3lJ4AjqTuGWrVAoxH4FkV8J4mJOq34RkE3V0REnurIodjZKL1LW1Y + CKzgIi6TUlZNFRBn3+/PLPnHOF0SXOgbiQv1ikLReZGkDeBAx5Jieb70ewIz + eawLyRRtwInmrOV4ajszSfarYRkh8ulN6AwcF8AVJt2cxx2iXcMoEHQBbcVs + VT+MxTfLRde61Nc6lMWyfsjkvptIyLc7MkErrPYXo/psJGwvjJw70TEHiKLQ + Y+X/hZ7ESj26bu1oiBGGD+4v6CMo4qa3RnKcvHyMbdgNccFbWQktZ0kjvQGA + MWoz/8jdz61tA+tlokM3ZEkWclrJEcyQG8N1gYM/ER9pZBuM6PWZZvp4Yfxw + F5Beu2pgJ1HlKaePwtm3itVPwuIm7K57YEyY76912L+GYiAPpvXt3B7ijCiX + kpHTUw9U2yq2R2zT1zgVePUA2pa379QmBnH1pwzfOzlU+4zli2qSlBTJAibR + LW1afjWaarigdwbDkuxVVinB/SM/U/7jQgXnCQIeVmteW2crwvH/rtfYCmja + ffmJCCsjwDL908TcpJGTFtHxKyGrseMWSqgjlQw1mqmbOU//8DXzNUIn/AJj + p/h7NmRwDQbDnmoZApNGrd9ZiNzlO/nxCD561qD4FPOmSRAIJhQuFjTfompM + U3gNYE4cGPlbBHP9O1YHWfbjWNRqgZHYa772yEJ20+4HIa0lcNOCjCqm/NPB + 7Irj881O9z/hZRWLpHW/MAtesZNe8XDjgXAs5gsYmsYHBlZZ/dP6Pwz0qIO/ + V8FVDMyMLDkJMgAKHr7F+DMzCPOsA56mdPqhHnhTIKIpBTW0R2wPWMomVg7c + vTtI+ddYRIYMdBMgaWN0z9IRWR1PFlQ6aTVGdxTBJ4gf5k8ITtjdykssa1dS + 8ObTnGjMEyiHGlJmK6cm/EYXmOOj8p2HPoBQrqSk] certificate: | - -----BEGIN CERTIFICATE----- - MIIGUTCCBDmgAwIBAgIDAvEYMA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB - Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV - BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjEwNzE2MTYyNzQ2WhcNMjIwNzE2 - MTYyNzQ2WjCBrjELMAkGA1UEBhMCQVUxDDAKBgNVBAgTA05TVzEPMA0GA1UEBxMG - U3lkbmV5MRQwEgYDVQQKEwtDQWNlcnQgSW5jLjEcMBoGA1UECxMTSW5mcmFzdHJ1 - Y3R1cmUgVGVhbTEjMCEGA1UEAxMaQ0FjZXJ0IGV4dGVybmFsIG1vbml0b3Jpbmcx - JzAlBgkqhkiG9w0BCQEWGGV4dG1vbi1jbGllbnRAY2FjZXJ0Lm9yZzCCAaIwDQYJ - KoZIhvcNAQEBBQADggGPADCCAYoCggGBANIdW3yyGH9LWYseNDIIs+DDHEd3HGOO - H31JQKng8LdEZynotRISXDhCfI+Ys0yxMy/t6Sj9pphdoJLFpoTXUB23Hx55LYD3 - /DiUnoz9WXj0pqiiVKZFdEh1Uwb/M4LDXD4IalAnFpSz28CCr2/24f47e21y6xz2 - LLEIjFpWreBpk81Yceu1Hh+OAtabzs9R0DRX2hILfmb4QjnUNmmoSjMd4/kCShtU - xSaKGKQ9TUc8fjmq1E5fmE6lbKkiwpIDNBIJeJCTo5tq3t6ncFt/L6Tv3gsCQUag - lXq09Ca3jyWp6KzTB2sBu/8RFZaBgCcp8yJig89e07IfTqEJDKLzVqj49SMWtajM - vv0oArXNQ0C5f8ZUNV0jkszopWqgEhDyso94Yuk5MPVcCPsq9UYVEMEuPFMNVVpV - qq12MNYrWPySwQzsCAgAuEva8rrwmfrlUA17yhvdxRvp/fJtxq3f/5OA4uCT28kS - gehoo41dTJtRdpx0BvbWZIIC2mzC4kHGJQIDAQABo4IBTzCCAUswDAYDVR0TAQH/ - BAIwADBWBglghkgBhvhCAQ0ESRZHVG8gZ2V0IHlvdXIgb3duIGNlcnRpZmljYXRl - IGZvciBGUkVFIGhlYWQgb3ZlciB0byBodHRwOi8vd3d3LkNBY2VydC5vcmcwDgYD - VR0PAQH/BAQDAgOoMEAGA1UdJQQ5MDcGCCsGAQUFBwMEBggrBgEFBQcDAgYKKwYB - BAGCNwoDBAYKKwYBBAGCNwoDAwYJYIZIAYb4QgQBMDIGCCsGAQUFBwEBBCYwJDAi - BggrBgEFBQcwAYYWaHR0cDovL29jc3AuY2FjZXJ0Lm9yZzA4BgNVHR8EMTAvMC2g - K6AphidodHRwOi8vY3JsLmNhY2VydC5vcmcvY2xhc3MzLXJldm9rZS5jcmwwIwYD - VR0RBBwwGoEYZXh0bW9uLWNsaWVudEBjYWNlcnQub3JnMA0GCSqGSIb3DQEBDQUA - A4ICAQCm8BzJDpZtb5NgIsxKXKYKqkmhnEpRWuRlTgrAlK3Fj1NH6XSs+gJt4wNz - HPMtPvJYgqPvDUgjujCV4ntMt/bta5HKaQ7l8Fol9n7fL2K225o0jA27ajDdNNAU - CdZVGLkeQIS5EuAZ3jqt59TbKy5ZiF7zLE/h3LbXolykom/7pvmgKYjkIp5sKvKh - gGndU+roAKejLaFgxCWX02DXC0qj31vgs81YM1i6D4UiUPP0NOoAPYms+9rezk66 - bF+pdZLclSoUPoral+qg/p7mF0+LaAxg5dptonX6mPIkRQPSmFXMWWmiqupyS3aJ - Tg6pxPLoH5n1DCWRWmBeWbpNRgXhLV/hFdNn76kVZx2+NeOaJ+WkHMfc82cWUsqw - 0DwHfaFEruLAK97vU8B2lnX7jvOXP5vTzPcp7X01EES9g0dkXsknBDJRPjm3h8A3 - v5A+zi8NuiBHXcEjfh/2XUXNEpai/ZVmjfg6XBlkGi7IRZHdQG6SJ+3FFOBXr7DO - pjoj8eOUx2i3/Zc0E7eA2cnFpwlTcN9v+7yH/U76VxGpZw0uN5ZV6/QVcxrFsUER - 5gCzDizhtDcTsX/4/6giuZ9AzaxGfhCTdI+4iq8txuX9bVPizgq36rICHA4NdF39 - IqsKlypGICER+j5yre6te+uuNhimIYbtpaalp9fArfOhxMDjRQ== - -----END CERTIFICATE----- + -----BEGIN CERTIFICATE----- + MIIGUTCCBDmgAwIBAgIDAvqKMA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB + Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV + BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjIwNjE4MTAxOTE3WhcNMjMwNjE4 + MTAxOTE3WjCBrjELMAkGA1UEBhMCQVUxDDAKBgNVBAgTA05TVzEPMA0GA1UEBxMG + U3lkbmV5MRQwEgYDVQQKEwtDQWNlcnQgSW5jLjEcMBoGA1UECxMTSW5mcmFzdHJ1 + Y3R1cmUgVGVhbTEjMCEGA1UEAxMaQ0FjZXJ0IGV4dGVybmFsIG1vbml0b3Jpbmcx + JzAlBgkqhkiG9w0BCQEWGGV4dG1vbi1jbGllbnRAY2FjZXJ0Lm9yZzCCAaIwDQYJ + KoZIhvcNAQEBBQADggGPADCCAYoCggGBANIdW3yyGH9LWYseNDIIs+DDHEd3HGOO + H31JQKng8LdEZynotRISXDhCfI+Ys0yxMy/t6Sj9pphdoJLFpoTXUB23Hx55LYD3 + /DiUnoz9WXj0pqiiVKZFdEh1Uwb/M4LDXD4IalAnFpSz28CCr2/24f47e21y6xz2 + LLEIjFpWreBpk81Yceu1Hh+OAtabzs9R0DRX2hILfmb4QjnUNmmoSjMd4/kCShtU + xSaKGKQ9TUc8fjmq1E5fmE6lbKkiwpIDNBIJeJCTo5tq3t6ncFt/L6Tv3gsCQUag + lXq09Ca3jyWp6KzTB2sBu/8RFZaBgCcp8yJig89e07IfTqEJDKLzVqj49SMWtajM + vv0oArXNQ0C5f8ZUNV0jkszopWqgEhDyso94Yuk5MPVcCPsq9UYVEMEuPFMNVVpV + qq12MNYrWPySwQzsCAgAuEva8rrwmfrlUA17yhvdxRvp/fJtxq3f/5OA4uCT28kS + gehoo41dTJtRdpx0BvbWZIIC2mzC4kHGJQIDAQABo4IBTzCCAUswDAYDVR0TAQH/ + BAIwADBWBglghkgBhvhCAQ0ESRZHVG8gZ2V0IHlvdXIgb3duIGNlcnRpZmljYXRl + IGZvciBGUkVFIGhlYWQgb3ZlciB0byBodHRwOi8vd3d3LkNBY2VydC5vcmcwDgYD + VR0PAQH/BAQDAgOoMEAGA1UdJQQ5MDcGCCsGAQUFBwMEBggrBgEFBQcDAgYKKwYB + BAGCNwoDBAYKKwYBBAGCNwoDAwYJYIZIAYb4QgQBMDIGCCsGAQUFBwEBBCYwJDAi + BggrBgEFBQcwAYYWaHR0cDovL29jc3AuY2FjZXJ0Lm9yZzA4BgNVHR8EMTAvMC2g + K6AphidodHRwOi8vY3JsLmNhY2VydC5vcmcvY2xhc3MzLXJldm9rZS5jcmwwIwYD + VR0RBBwwGoEYZXh0bW9uLWNsaWVudEBjYWNlcnQub3JnMA0GCSqGSIb3DQEBDQUA + A4ICAQBkwXx7IEeXNytbGtv6IQlvJz1tkpOz8asBgbtD1byQCO7JRUDblQgzap2y + rgeLZc5wnTYP3FKnzquXvxfkgfR7a40WPTSPpvrSXMY8/BUvlNgYVpYBjMxGsVCX + gW/vX2A7+vSgJLUkCYJL98ooT+kSmsh8Xs6rB2Jz8yCDC8Niu5jUta47YCviuvuN + Z6c8mNqrFV7MfRBBfGodl5a2djFzKYhgrPyaT01qr7Qa42wDOWs1Pl1uD4Z8m08N + vv51y694gnWMKAhM42AKAEMiybHJ+1eIV9sOkanBDjeCAM4/ugK5Gm29CnI5rNV8 + VZMrksS/YiMZPPHrVrqaUHVceV0eqYRi1bmIRvaSBEEJGK4YF52qmBJmuszqBnTW + YZ8CkZCPOI74K1wpG1F/sgME1yu9WbxjnB3Ig3CZ/EqJmhf66cgsmnTbpOsabE8v + 5eIsyfAKlAcNRNGabDyRTVJsSlD/ISivTnoQsW1ay5bLkyHgmRgc9U4zvNeMBKWz + vJ/126fnc4tkzlk0SM+ntph3xKAaqEEZX3pchnxlNWohS+3T3c6lUA0YUsvC4vL7 + N0VLPi3YcRzrvciSNXZTpTrYnKOWKW6DKp6T9AVaf0DxcAc3UvCQd0QOEhqKnntn + kvuUL+mj0ZV1h7F0/NUmtEb/OOt/Yt0LgiIYarfj2tKipgCDuQ== + -----END CERTIFICATE----- diff --git a/hieradata/nodes/git.yaml b/hieradata/nodes/git.yaml index dc34b90..f2a056e 100644 --- a/hieradata/nodes/git.yaml +++ b/hieradata/nodes/git.yaml @@ -6,16 +6,16 @@ profiles::base::admins: - jandd - law profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAicLOD4qZ/TcPgGkP3umuFlFULVt0+2Kc6cw2 - TtRS/9fBxBNykYPKIKwkCf1pvx4iZMHk+cCzmi2jJUgSual0AYMx5+Ax+tzW - FQGYv8U2fzC8yCvY0xRMe/pls58rrUxVRN4EcFEa+NWIGiIM84ds5qdCY5SY - g2hhJql3N1KPeO9TMWKvrQjL6ZKvHgOg71KrP0+TnYBUbZDRPnklNnvVCCj5 - 4i+l+pgI0H4eEO2vysI6xFwC8ntxOqo4rJTAmLypKvshDpHPdgWShnBtcQq1 - 4yxr5ZTY22pXD5k7cVRtPn4WyW8ackk3be4BH0AtUd4vA6Wx+bJ7qLw9kd/G - yZSmjzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCJyEfssCaSbBwlVn8O - qWALgDBDQ/V8TsmywwNNLfl37qfDD/xaT7aqWvhsZsvBl1Z9/go4u4gtxKju - Ga7tgV79rn8=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAicLOD4qZ/TcPgGkP3umuFlFULVt0+2Kc6cw2 + TtRS/9fBxBNykYPKIKwkCf1pvx4iZMHk+cCzmi2jJUgSual0AYMx5+Ax+tzW + FQGYv8U2fzC8yCvY0xRMe/pls58rrUxVRN4EcFEa+NWIGiIM84ds5qdCY5SY + g2hhJql3N1KPeO9TMWKvrQjL6ZKvHgOg71KrP0+TnYBUbZDRPnklNnvVCCj5 + 4i+l+pgI0H4eEO2vysI6xFwC8ntxOqo4rJTAmLypKvshDpHPdgWShnBtcQq1 + 4yxr5ZTY22pXD5k7cVRtPn4WyW8ackk3be4BH0AtUd4vA6Wx+bJ7qLw9kd/G + yZSmjzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCJyEfssCaSbBwlVn8O + qWALgDBDQ/V8TsmywwNNLfl37qfDD/xaT7aqWvhsZsvBl1Z9/go4u4gtxKju + Ga7tgV79rn8=] profiles::x509cert_common::certificates: 'git.cacert.org': certificate: | diff --git a/hieradata/nodes/idp.yaml b/hieradata/nodes/idp.yaml new file mode 100644 index 0000000..8cdc0a2 --- /dev/null +++ b/hieradata/nodes/idp.yaml @@ -0,0 +1,16 @@ +--- +classes: + - roles::idp +profiles::base::admins: + - jandd +profiles::icinga2_agent::pki_ticket: > + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBAD + AFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEASfyW90GZx59x9n47HHlEnkdZ+i + niLnTLC+oI8gfFPIH3Tcv15144flW2i0yZGezOrx7u45TB5Etat1xQHikWej + AIZnIOJ5EQSNbpz13tGFscC8jdt3r0MzCzdy9S/feyY7hy7Rp5e660ihBJYT + eLy+FbR+w3HQ7wBlpXaKB2qXHqBW2dap8iWAVFSqZLm0doZ6NY6vhhFi6JnI + gFj6QmUJuE2YyfsJBTl3+u+U8CaIVHwM2NnOXqNys57LUgfCWe3vEKn09tS+ + 4lCT/2nuMykMjtSHnMG3JwhsrHs9it44sqRF4iviuYOx9hjRjt+oAqe0P8ed + kdo3U37c2JsLdLvTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAcAkuhaq + iY0ptYro2vaoRbgDC5RScVpxR1ZhQKA2jU9b7RcuV44fADXtPnWDhFt7wwNc + kM75ghXXnTtSsfA5gqsLo=] diff --git a/hieradata/nodes/ircserver.yaml b/hieradata/nodes/ircserver.yaml index 5dc4bdd..3aa88ed 100644 --- a/hieradata/nodes/ircserver.yaml +++ b/hieradata/nodes/ircserver.yaml @@ -5,16 +5,16 @@ profiles::base::admins: - jandd profiles::base::rootalias: irc-admin@cacert.org profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAHaF5dH8H7SFb1mKY8FWu3TL7MoHn2lk2V/1S - kjM3nOJ8tSCSVLZLg+cE6dLZPS8rUp/UILBG2BqN1eg41pRdEJHSa/4XmvP0 - j8V2xWsahNnhMX6/NBHkNpiyC2iGTmhj0V+31QN9QOMRDfsStNeBgR/atw5k - h20bpmlensNUeMOz5McoojMDFrshgPSp4kg1FNofr+6ZXiEGb4Jf4W1617k+ - 0cISAqQ9kfGOrUcvXVIFx+c2trzbnrnZpmVqXOq8xVkgK9LLLVeYPZfnPwxY - 4SBjevfBjG5cmBgZvENiPTVEDWnv+9dETR68UiG+dBdbVdOuFP/8qJtpppW1 - FZPkIzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC6l3NsMeJypedfMF6O - i2rIgDDlShiaPIGUL6kAk2yEPiIdPCt8J86QsLY+6OsLV0zn+wRQJGL+WY3C - FbKij0dpGow=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAHaF5dH8H7SFb1mKY8FWu3TL7MoHn2lk2V/1S + kjM3nOJ8tSCSVLZLg+cE6dLZPS8rUp/UILBG2BqN1eg41pRdEJHSa/4XmvP0 + j8V2xWsahNnhMX6/NBHkNpiyC2iGTmhj0V+31QN9QOMRDfsStNeBgR/atw5k + h20bpmlensNUeMOz5McoojMDFrshgPSp4kg1FNofr+6ZXiEGb4Jf4W1617k+ + 0cISAqQ9kfGOrUcvXVIFx+c2trzbnrnZpmVqXOq8xVkgK9LLLVeYPZfnPwxY + 4SBjevfBjG5cmBgZvENiPTVEDWnv+9dETR68UiG+dBdbVdOuFP/8qJtpppW1 + FZPkIzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC6l3NsMeJypedfMF6O + i2rIgDDlShiaPIGUL6kAk2yEPiIdPCt8J86QsLY+6OsLV0zn+wRQJGL+WY3C + FbKij0dpGow=] profiles::x509cert_common::certificates: 'irc.cacert.org': certificate: | diff --git a/hieradata/nodes/issue.yaml b/hieradata/nodes/issue.yaml index df043c5..3d77d09 100644 --- a/hieradata/nodes/issue.yaml +++ b/hieradata/nodes/issue.yaml @@ -7,16 +7,16 @@ profiles::base::admins: - dirk - dinoex profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAFvuCLRlXBmas6v2JGcKxy0NVvpc+hv/yNRqS - SMokUDoNTi6nbZ1UrbGjZMCq+g/TUyW0SABEIuraEDoxzWfBJZXipC70e/Aj - zg/XURpKxmRK5c/4ouBA/Ecze1jjDx476B4/4LyO/CK4G/2Iu2xdsDth3IV8 - FKV1GaPFAZlRk/hPphw1VNSyuZdYraT4Sbo7hJ6cvwE0w3mHNBgtTpProgoF - hQQz2Wfr5f/YWaFvlWHVJtJYVssSvrcEZFNYaIvoBNcwow2QPtyBiv8JrUHz - OESJpYQQ2jyqhliiCsTzn2v4AWUiCIk5Im7RQ/EIiAskrdMk3y7zjb+Ev62V - aXn5/TBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBACg060g6bh04Y6SdMh - kIYogDAio9Ev3971h+gUsvNpmeUh4oeSZTA0oQICRZAgGOOHVAiApKhLut3N - uGBx4XT1fUU=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAFvuCLRlXBmas6v2JGcKxy0NVvpc+hv/yNRqS + SMokUDoNTi6nbZ1UrbGjZMCq+g/TUyW0SABEIuraEDoxzWfBJZXipC70e/Aj + zg/XURpKxmRK5c/4ouBA/Ecze1jjDx476B4/4LyO/CK4G/2Iu2xdsDth3IV8 + FKV1GaPFAZlRk/hPphw1VNSyuZdYraT4Sbo7hJ6cvwE0w3mHNBgtTpProgoF + hQQz2Wfr5f/YWaFvlWHVJtJYVssSvrcEZFNYaIvoBNcwow2QPtyBiv8JrUHz + OESJpYQQ2jyqhliiCsTzn2v4AWUiCIk5Im7RQ/EIiAskrdMk3y7zjb+Ev62V + aXn5/TBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBACg060g6bh04Y6SdMh + kIYogDAio9Ev3971h+gUsvNpmeUh4oeSZTA0oQICRZAgGOOHVAiApKhLut3N + uGBx4XT1fUU=] profiles::x509cert_common::certificates: 'issue.cacert.org': certificate: | diff --git a/hieradata/nodes/jenkins.yaml b/hieradata/nodes/jenkins.yaml index 6aa0109..3e710a0 100644 --- a/hieradata/nodes/jenkins.yaml +++ b/hieradata/nodes/jenkins.yaml @@ -5,13 +5,13 @@ profiles::base::admins: - jandd - law profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEArbWeNESG9eVk3n74ofPXmFzRTV9pbZT65WaV - ABMPRuaUgNIEjhMhk5xxEUUC3oaz/SM7rLxCASmjBMcNufBNs9/lQ4oXThb2 - q8HFHqcNhotpD/+IhPHbajrkopWDW4OR1JHcj8rVwG7UBi5MGn1WRcUAdH1i - t9vqfQSuZbiWaCrAfqwxQlycOwpiCHum6xBTMB4s7ix1ADkkYjrEik9z+03+ - I5zU+kJgksrmwA49BvTIiA/fuVgAT5n0Yx5to6GSh+4Ax3aWn7auaPd9rDz4 - /2Me4Kr7vyST8LdqLnA1mgFXJJTPmXMNMVb6Yp4x4pDxvOh6bQvjjtdUoXDF - OvwekjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAnSm0NhdNR0zRRTAxa - CWvDgDDIHqd3Iz4xbCy1MYoSF51kW9MZmW7fhR4yS9nHeO9mcjduLxAjWFsZ - 59ogTZ0Pz0A=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEArbWeNESG9eVk3n74ofPXmFzRTV9pbZT65WaV + ABMPRuaUgNIEjhMhk5xxEUUC3oaz/SM7rLxCASmjBMcNufBNs9/lQ4oXThb2 + q8HFHqcNhotpD/+IhPHbajrkopWDW4OR1JHcj8rVwG7UBi5MGn1WRcUAdH1i + t9vqfQSuZbiWaCrAfqwxQlycOwpiCHum6xBTMB4s7ix1ADkkYjrEik9z+03+ + I5zU+kJgksrmwA49BvTIiA/fuVgAT5n0Yx5to6GSh+4Ax3aWn7auaPd9rDz4 + /2Me4Kr7vyST8LdqLnA1mgFXJJTPmXMNMVb6Yp4x4pDxvOh6bQvjjtdUoXDF + OvwekjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAnSm0NhdNR0zRRTAxa + CWvDgDDIHqd3Iz4xbCy1MYoSF51kW9MZmW7fhR4yS9nHeO9mcjduLxAjWFsZ + 59ogTZ0Pz0A=] diff --git a/hieradata/nodes/mariadb.yaml b/hieradata/nodes/mariadb.yaml index 7e6388b..a8890fa 100644 --- a/hieradata/nodes/mariadb.yaml +++ b/hieradata/nodes/mariadb.yaml @@ -4,13 +4,13 @@ classes: profiles::base::admins: - jandd profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAExeqn1absUzqN1sJOyHNtZXPcsU6vj8CZbAU - BxRes3h2rmqSbPB5pTkz7n3bPhQ3YYJpFkW7gIZ2I7R2O8FxQMwR7n+QL72F - ULV7FO13kAOKbGm/hkNoCfCW0AmaLO52v7lMPlMgbXqbX3i5wCj3auvz/O4R - hyGA90K+k3kf1/6oQlVrRf9fSiufVYoiihDeJ110FhRFB4mBxOHFJopz3A/H - 2POMF3BaLv38t+dYFtkCt7jNW2JCjv15VuplZIh3BYrPCzk0WyUIJ8OUpK4I - Wr5+eHO5voJC3KSOC6XkLGDIdYxdlsagNDTVjITPv9qMTf8to2sGRP5SYybe - RHGy0jBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC052YuUZgXpP5SSxLW - i0VDgDAmv/QiQgdEsqIxzX0VsA4Qn/JSE1QI14hUme9FSJEBRzN8+l9v3nlM - Sc10J34uuTQ=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAExeqn1absUzqN1sJOyHNtZXPcsU6vj8CZbAU + BxRes3h2rmqSbPB5pTkz7n3bPhQ3YYJpFkW7gIZ2I7R2O8FxQMwR7n+QL72F + ULV7FO13kAOKbGm/hkNoCfCW0AmaLO52v7lMPlMgbXqbX3i5wCj3auvz/O4R + hyGA90K+k3kf1/6oQlVrRf9fSiufVYoiihDeJ110FhRFB4mBxOHFJopz3A/H + 2POMF3BaLv38t+dYFtkCt7jNW2JCjv15VuplZIh3BYrPCzk0WyUIJ8OUpK4I + Wr5+eHO5voJC3KSOC6XkLGDIdYxdlsagNDTVjITPv9qMTf8to2sGRP5SYybe + RHGy0jBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC052YuUZgXpP5SSxLW + i0VDgDAmv/QiQgdEsqIxzX0VsA4Qn/JSE1QI14hUme9FSJEBRzN8+l9v3nlM + Sc10J34uuTQ=] diff --git a/hieradata/nodes/monitor.yaml b/hieradata/nodes/monitor.yaml index 05213aa..2a5515c 100644 --- a/hieradata/nodes/monitor.yaml +++ b/hieradata/nodes/monitor.yaml @@ -4,44 +4,59 @@ classes: profiles::base::admins: - jandd - law -profiles::base::crl_job_enable: true -profiles::base::crl_job_services: - - apache2 +profiles::base::crl_job: + enable: true + hostname: monitor.infra.cacert.org + services: + - apache2 + check_url: https://monitor.infra.cacert.org:5665/v1/actions/process-check-result + api_user: passive-check-submit + api_password: > + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBAD + AFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAM31x48NC4B2agnpHt0hEzxLLJm + ADhYW0Lj3JuBNj+wpK8O4GkAf9L2OlOiNAIgiX5epzbUtvtB8ayQQ2+4yuNn + jkgfSDvPaGU+f0mFv0CjynUEDrf2rQzevFyIfnpzN9ZSnGw2/59tpS0LyJ6M + Yv3NmB0mdXzPWMrgCMt+G9i/l1s9yVjOw7p7V9prpUqD7hGKG0Fg7EeM7LFJ + 1ovxPDDar4ZlhooM6+W3Ov5n0y/3bYaPWv+VhcVmSQvWgJw6ZqP5jhpYTqSC + dr8urkIi1wfSSPeiNXhK+SQS/KFZOl9dmhj6QuereRyXX1H7X7fphVltADBq + S3mCbxlgEEPPgTbzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDlvyMRCV + MAziedXFk/L9XcgDDpzkgF8ybQ+aX31v25dTxzAPEnjuvaGY5njoUEbcpkOo + f0mf2So5a6xrylLZCcxrw=] profiles::icinga2_master::git_pull_ssh_passphrase: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEADAUF/OAtThNdlPwEwrPKAVwl+wTJbirFEWxL - rJzE1qe+NSncOqD+G6KNOBQRRXfv/sf81+AnTCahM1/kv5TPILrUgXoxW5c0 - IXC6OlDfaIab8kcC45wn2yj/igZnW1Xvix3n268pEfRnNDjUSFwrgbmaLtoV - ovDLZvQOlWntN8VUuYaDr66XRSEy4AGcmCMUms+6RQqdupWfOCrHtnTtVyyN - enQUKr0+ndlnzIkXiU4ghOjExFzGJ8BxGyKTMeQ72k2GZlDPUk72sixZ647k - f7CbzXToutyFqieOdNtkAKDY2T3ij03Wd3JhNWTu1Jbe4G/AQgsxiTwETdqh - /QgjjDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBKOeRdLS8fFyoc08hO - BnsVgDBWDpuwBbC31j4g02xKE0tbvazTE8zhkH6iS5mIrL3R5heLvDwquYia - pUh+MxqObAs=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEADAUF/OAtThNdlPwEwrPKAVwl+wTJbirFEWxL + rJzE1qe+NSncOqD+G6KNOBQRRXfv/sf81+AnTCahM1/kv5TPILrUgXoxW5c0 + IXC6OlDfaIab8kcC45wn2yj/igZnW1Xvix3n268pEfRnNDjUSFwrgbmaLtoV + ovDLZvQOlWntN8VUuYaDr66XRSEy4AGcmCMUms+6RQqdupWfOCrHtnTtVyyN + enQUKr0+ndlnzIkXiU4ghOjExFzGJ8BxGyKTMeQ72k2GZlDPUk72sixZ647k + f7CbzXToutyFqieOdNtkAKDY2T3ij03Wd3JhNWTu1Jbe4G/AQgsxiTwETdqh + /QgjjDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBKOeRdLS8fFyoc08hO + BnsVgDBWDpuwBbC31j4g02xKE0tbvazTE8zhkH6iS5mIrL3R5heLvDwquYia + pUh+MxqObAs=] profiles::icinga2_master::git_pull_tokens: - ENC[PKCS7,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] profiles::icinga2_master::web2_database_password: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAIgd5qF6rnFWYhyo38MRacrz2VcYdoni/m8Zd - piYiYmGp2GaJZZEZC3svdYxRZz8vmXz1/V9PM8znf8E8z6ClbqF6urExUIf9 - Dl5+60UOyasp2iHngRG9fcKUBtPDqERlS04xD/CQup2XdDYEsaTrIIsnuOSc - Zut3vB1KSIerscLjLNUvZGanEwf1VGwzFU2rStIRFwgR9pDX/+gr/6T5+Ydd - rZrsvTClPKEKsJ7fQc/J+3fhphz8QlqYz0Yo2Yn/Ws9qvlr1O29cYTNJ5oj4 - xXB+VAeqCiTy0Bmud9W6FdHz61w5ylWjLRNT0qtW8bu/eFHCj6XTnBu4lorW - ocPHkTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDV+5TW/J23xVA6MGZo - zfzCgDBHbsaS9cJaGXgnZSKLOQwUlJmG7WgOL0FCgIEp8vYT8upZFuikokHH - vGkNL7s7xDw=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAIgd5qF6rnFWYhyo38MRacrz2VcYdoni/m8Zd + piYiYmGp2GaJZZEZC3svdYxRZz8vmXz1/V9PM8znf8E8z6ClbqF6urExUIf9 + Dl5+60UOyasp2iHngRG9fcKUBtPDqERlS04xD/CQup2XdDYEsaTrIIsnuOSc + Zut3vB1KSIerscLjLNUvZGanEwf1VGwzFU2rStIRFwgR9pDX/+gr/6T5+Ydd + rZrsvTClPKEKsJ7fQc/J+3fhphz8QlqYz0Yo2Yn/Ws9qvlr1O29cYTNJ5oj4 + xXB+VAeqCiTy0Bmud9W6FdHz61w5ylWjLRNT0qtW8bu/eFHCj6XTnBu4lorW + ocPHkTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDV+5TW/J23xVA6MGZo + zfzCgDBHbsaS9cJaGXgnZSKLOQwUlJmG7WgOL0FCgIEp8vYT8upZFuikokHH + vGkNL7s7xDw=] profiles::icinga2_master::ido_database_password: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAQVzlV3aXJTf54OReOA96VsrAPutFLx939Qf2 - pkjU4uzfh14wF6hCUBzJM3TsG8+EYFZmHQv7LqCbDQLfYVNs62sDlOBigWh4 - za1YWqewtuasrvqZdUKPD1tIyIGLh2+idv0/XJHpkv7nt/oVRoINZdzO+Afr - dbx6Dx6aFWpX98HLQdsw/G1X8o+YZwwklASfSXCw/1pGLsPWWYSoYjyD4N9U - eaOTiPQ2OLLnJtkAlyUMxTeq76iJw67vj0Vu8QqATZAoVU9rA/FnliMiYGrB - GC/c/ACt9A5HZ6orBlztCqFj8/Z61pyFH2+09jCxODdgebyLt+gRuVP6RZvC - XcFLlzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBB4LvLBDu+VZkAgtJ4b - nmt5gDBW4KHCxlUcs8bRo71HIiDcSMBOTahi2hMlzwNC12NZlIR2spYytjH4 - 2/8qhSpCx+U=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAQVzlV3aXJTf54OReOA96VsrAPutFLx939Qf2 + pkjU4uzfh14wF6hCUBzJM3TsG8+EYFZmHQv7LqCbDQLfYVNs62sDlOBigWh4 + za1YWqewtuasrvqZdUKPD1tIyIGLh2+idv0/XJHpkv7nt/oVRoINZdzO+Afr + dbx6Dx6aFWpX98HLQdsw/G1X8o+YZwwklASfSXCw/1pGLsPWWYSoYjyD4N9U + eaOTiPQ2OLLnJtkAlyUMxTeq76iJw67vj0Vu8QqATZAoVU9rA/FnliMiYGrB + GC/c/ACt9A5HZ6orBlztCqFj8/Z61pyFH2+09jCxODdgebyLt+gRuVP6RZvC + XcFLlzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBB4LvLBDu+VZkAgtJ4b + nmt5gDBW4KHCxlUcs8bRo71HIiDcSMBOTahi2hMlzwNC12NZlIR2spYytjH4 + 2/8qhSpCx+U=] profiles::icinga2_master::api_users: root: target: /etc/icinga2/features-available/api.conf @@ -60,251 +75,266 @@ profiles::icinga2_master::api_users: client-pki-ticket: target: /etc/icinga2/features-available/api.conf password: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAjrore6zK7GJXbP9FZ6ORUWvpt7FS2fXHiwB+ - ocTcmP7F8SnyCjYZ/a6S7eXPJVffZ6pZazozfUmW6HXOVFcSrZZdccEcZbFt - ZnQb9tp63BCHHGwqI/oj0jVdInaTXE1i4yQTjev/twzblmHIrEndfZnZzyAd - 61cnYuv8og5p5pccGYYoXBcPcguB9KtspfYL/eEwD4xNvqF/QlkAEXKZ5o39 - p9j24ao57Iwzy4o/dgI+MOr9NIMEtmXoIb3Ake3J7CaN26IuP22MTivFWf5p - 1vlMA69snYOifTKIw76eNACYCz+KA87dWDNEsR2OtCCbQ2EA1nrAXTdlYWdE - RmIpGTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAAs0An2QOnxac51GTU - gCG3gDAX0FOzW/oWi8c1PDIFb+0B4cTQRi9gP2fzugKu0bp0FBB7akZV6Zx0 - T5GP0WQAzU0=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBAD + AFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAjrore6zK7GJXbP9FZ6ORUWvpt7 + FS2fXHiwB+ocTcmP7F8SnyCjYZ/a6S7eXPJVffZ6pZazozfUmW6HXOVFcSrZ + ZdccEcZbFtZnQb9tp63BCHHGwqI/oj0jVdInaTXE1i4yQTjev/twzblmHIrE + ndfZnZzyAd61cnYuv8og5p5pccGYYoXBcPcguB9KtspfYL/eEwD4xNvqF/Ql + kAEXKZ5o39p9j24ao57Iwzy4o/dgI+MOr9NIMEtmXoIb3Ake3J7CaN26IuP2 + 2MTivFWf5p1vlMA69snYOifTKIw76eNACYCz+KA87dWDNEsR2OtCCbQ2EA1n + rAXTdlYWdERmIpGTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAAs0An2Q + Onxac51GTUgCG3gDAX0FOzW/oWi8c1PDIFb+0B4cTQRi9gP2fzugKu0bp0FB + B7akZV6Zx0T5GP0WQAzU0=] permissions: - "actions/generate-ticket" + passive-check-submit: + target: /etc/icinga2/features-available/api.conf + password: > + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBAD + AFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAM31x48NC4B2agnpHt0hEzxLLJm + ADhYW0Lj3JuBNj+wpK8O4GkAf9L2OlOiNAIgiX5epzbUtvtB8ayQQ2+4yuNn + jkgfSDvPaGU+f0mFv0CjynUEDrf2rQzevFyIfnpzN9ZSnGw2/59tpS0LyJ6M + Yv3NmB0mdXzPWMrgCMt+G9i/l1s9yVjOw7p7V9prpUqD7hGKG0Fg7EeM7LFJ + 1ovxPDDar4ZlhooM6+W3Ov5n0y/3bYaPWv+VhcVmSQvWgJw6ZqP5jhpYTqSC + dr8urkIi1wfSSPeiNXhK+SQS/KFZOl9dmhj6QuereRyXX1H7X7fphVltADBq + S3mCbxlgEEPPgTbzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDlvyMRCV + MAziedXFk/L9XcgDDpzkgF8ybQ+aX31v25dTxzAPEnjuvaGY5njoUEbcpkOo + f0mf2So5a6xrylLZCcxrw=] + permissions: + - "actions/process-check-result" profiles::icinga2_master::pki_ticket_salt: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAq7zw5VVeKvukhSo2g3YK/7fIUC5JbyTrX2XI - vAoB7RP2eoEXJRcZG71BNJRMXYlfRwZF31GKAx6zCnvSG8LPpl8Z7D8rNFi+ - Xw0ftUPE0A2WjMuX2ZPjwFRpQB5cuR0DRqvHoWzkyiePbhE62vRYxLamTT92 - 1f2FpBM42PIkyD+o9+Bu+1eUXFf4Bvg/srDq+clDQEUJEH9Zk0boUR0aYNzu - 7O1PW/QSMCvIRXnmhRQr4MoeHQmgK52JxssdISEEBPpjL/oQyJ57XjgDh55c - 8/gkj+L/p+E/TnE358x5FAm1PNSivH+uohXCxfMu87ukpBJh41tzfI7KBWxY - wEtKajBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC71KjJDv29zuAaxnyH - o3uJgDDydzmhZKEQxhkFNW9TNquxCTXdfPZ/zYPb/TqWq3amcnQwoqNltz+5 - QoSf/2LDk4o=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAq7zw5VVeKvukhSo2g3YK/7fIUC5JbyTrX2XI + vAoB7RP2eoEXJRcZG71BNJRMXYlfRwZF31GKAx6zCnvSG8LPpl8Z7D8rNFi+ + Xw0ftUPE0A2WjMuX2ZPjwFRpQB5cuR0DRqvHoWzkyiePbhE62vRYxLamTT92 + 1f2FpBM42PIkyD+o9+Bu+1eUXFf4Bvg/srDq+clDQEUJEH9Zk0boUR0aYNzu + 7O1PW/QSMCvIRXnmhRQr4MoeHQmgK52JxssdISEEBPpjL/oQyJ57XjgDh55c + 8/gkj+L/p+E/TnE358x5FAm1PNSivH+uohXCxfMu87ukpBJh41tzfI7KBWxY + wEtKajBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC71KjJDv29zuAaxnyH + o3uJgDDydzmhZKEQxhkFNW9TNquxCTXdfPZ/zYPb/TqWq3amcnQwoqNltz+5 + QoSf/2LDk4o=] profiles::icinga2_master::ca_certificate: | - -----BEGIN CERTIFICATE----- - MIIEyjCCArKgAwIBAgIVAMGxGJbZJq/vXMuXAnAC8QvFtvhMMA0GCSqGSIb3DQEB - CwUAMBQxEjAQBgNVBAMMCUljaW5nYSBDQTAeFw0xOTA3MTkxODIwNDVaFw0zNDA3 - MTUxODIwNDVaMBQxEjAQBgNVBAMMCUljaW5nYSBDQTCCAiIwDQYJKoZIhvcNAQEB - BQADggIPADCCAgoCggIBAMh+p0jach/6ICsP/o01nku28g0jFB/HSp5n/WZjzykW - MvgvYc/1lEaiuIeB93AobGB3EACNw2/Xfh1deRGP8UsIOIjeeUibfk0i4SOmFBRb - 0ZmwUeNVygY7rmhO+fwTPi6bb2+AA50RkDP7jTpwaQFxppziTXUqW8mj0LBSLtNL - z8dC2YS/JLKSoNyHupQcL+pHVHO5S9QnFWTnhwIbnWSJTG13BOYw/RUz6WcxFDHl - Xi/lprjcorBUDsH5YBfy+/2WJ0MZFqRnCPQKb5oilR1/k+9XpmFz8W98KCujjpNm - BEantf7OaaYFIxxoWyrGC1RiMnkSQwa9Pcxgwflca5UC1fW0Jx2zsgDscdWp+Xeo - lhYtyHa6upgny66SvekjM9mAm6vtlsBplxYZtz6BgqoxXqk0AwAwiU/9nyXGekAp - FPMmENBLZvANuA6hdaMJQpOoyHBDOT8teoIJOut92ptk5bVE4gxwcWc1uFCP05nr - gA8iTXnabihXbm2Wb8kk/+34wEru5jpwMh1NEH/TvaqPnly/dBHkmEhJquYyoZFS - ttKl64XXdy9HGaTaA6b3dQPeZqHbmadRZzcsxjn+zP8Nu8OTZ4HXkAJ2e3nxlRKs - 2EaZDJK4SoNBvvkYLScLLYH5X1uC2gs6AHiQDiczQYxMqai5pEnrLHO7B/pE+d/1 - AgMBAAGjEzARMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggIBAGYh - pqAK55ei8+S+rXt1wQbejAphJ2GtTft8XjlfVbpk7s7wd/Wt0gLAs4dvPPI1U0k9 - N6E5WJrn31QbaXHFDwdxFw1ViLxDmepAp+Kp3pQE5bPNjo5e6iwgOGVB20R20ADo - foUfk5u6WfGGSJznDkTTdoYdSsHm1d1nsZKt0i2QFnLEIEBOJW4gwY4LiW7ArfYS - 21Ji9VLgKxF9We4Y0ppY+7rU8r/aNDrYv0Ghe+IA0+k8KoTGuhBXzxfwUUZ+1+yA - JYSmxFzhPJCdwRX3IBn4uTVMRlugntgpmB7m5RyW18MUlAw52Ppe5EtOke1lxxh0 - G5KYt+pKPnkOVj2LRLvOcAOO47i42q+3P4m2elkPHTrI2JmnTwWNjpkNNc4LeFXs - 3HE3SoSvXvImabhBfioqThVMAEEjrtkAQSOFg281vaIgUPbwqcVmbOHv/2Cow0xw - gYrp+hB0hhf5rpYi1SMLTKIQUJT6CKnIgN9KHMwcz6Zq4WcshXQxZZrazXomJJ9k - WKBpvys1Mfn0Y+phqmCXW7D9Yh1T32pnyOTm8kUonBhIoDEwYN5v175ySw8jjiUD - Dlkc/kuv3szLVWx63FvOPc6ra9rmmdwmDaVTd9fGlo/NrquCQOGu59hiACPept+I - y+bP1kZ0Z+5qrmlX0zrcLspzXOyY0VX/YZ3unzyp - -----END CERTIFICATE----- + -----BEGIN CERTIFICATE----- + MIIEyjCCArKgAwIBAgIVAMGxGJbZJq/vXMuXAnAC8QvFtvhMMA0GCSqGSIb3DQEB + CwUAMBQxEjAQBgNVBAMMCUljaW5nYSBDQTAeFw0xOTA3MTkxODIwNDVaFw0zNDA3 + MTUxODIwNDVaMBQxEjAQBgNVBAMMCUljaW5nYSBDQTCCAiIwDQYJKoZIhvcNAQEB + BQADggIPADCCAgoCggIBAMh+p0jach/6ICsP/o01nku28g0jFB/HSp5n/WZjzykW + MvgvYc/1lEaiuIeB93AobGB3EACNw2/Xfh1deRGP8UsIOIjeeUibfk0i4SOmFBRb + 0ZmwUeNVygY7rmhO+fwTPi6bb2+AA50RkDP7jTpwaQFxppziTXUqW8mj0LBSLtNL + z8dC2YS/JLKSoNyHupQcL+pHVHO5S9QnFWTnhwIbnWSJTG13BOYw/RUz6WcxFDHl + Xi/lprjcorBUDsH5YBfy+/2WJ0MZFqRnCPQKb5oilR1/k+9XpmFz8W98KCujjpNm + BEantf7OaaYFIxxoWyrGC1RiMnkSQwa9Pcxgwflca5UC1fW0Jx2zsgDscdWp+Xeo + lhYtyHa6upgny66SvekjM9mAm6vtlsBplxYZtz6BgqoxXqk0AwAwiU/9nyXGekAp + FPMmENBLZvANuA6hdaMJQpOoyHBDOT8teoIJOut92ptk5bVE4gxwcWc1uFCP05nr + gA8iTXnabihXbm2Wb8kk/+34wEru5jpwMh1NEH/TvaqPnly/dBHkmEhJquYyoZFS + ttKl64XXdy9HGaTaA6b3dQPeZqHbmadRZzcsxjn+zP8Nu8OTZ4HXkAJ2e3nxlRKs + 2EaZDJK4SoNBvvkYLScLLYH5X1uC2gs6AHiQDiczQYxMqai5pEnrLHO7B/pE+d/1 + AgMBAAGjEzARMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggIBAGYh + pqAK55ei8+S+rXt1wQbejAphJ2GtTft8XjlfVbpk7s7wd/Wt0gLAs4dvPPI1U0k9 + N6E5WJrn31QbaXHFDwdxFw1ViLxDmepAp+Kp3pQE5bPNjo5e6iwgOGVB20R20ADo + foUfk5u6WfGGSJznDkTTdoYdSsHm1d1nsZKt0i2QFnLEIEBOJW4gwY4LiW7ArfYS + 21Ji9VLgKxF9We4Y0ppY+7rU8r/aNDrYv0Ghe+IA0+k8KoTGuhBXzxfwUUZ+1+yA + JYSmxFzhPJCdwRX3IBn4uTVMRlugntgpmB7m5RyW18MUlAw52Ppe5EtOke1lxxh0 + G5KYt+pKPnkOVj2LRLvOcAOO47i42q+3P4m2elkPHTrI2JmnTwWNjpkNNc4LeFXs + 3HE3SoSvXvImabhBfioqThVMAEEjrtkAQSOFg281vaIgUPbwqcVmbOHv/2Cow0xw + gYrp+hB0hhf5rpYi1SMLTKIQUJT6CKnIgN9KHMwcz6Zq4WcshXQxZZrazXomJJ9k + WKBpvys1Mfn0Y+phqmCXW7D9Yh1T32pnyOTm8kUonBhIoDEwYN5v175ySw8jjiUD + Dlkc/kuv3szLVWx63FvOPc6ra9rmmdwmDaVTd9fGlo/NrquCQOGu59hiACPept+I + y+bP1kZ0Z+5qrmlX0zrcLspzXOyY0VX/YZ3unzyp + -----END CERTIFICATE----- profiles::icinga2_master::ca_key: > - ENC[PKCS7,MIIOHQYJKoZIhvcNAQcDoIIODjCCDgoCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAndhxooQI/m9cfD6jfWVHSce7ePzRwpt8F4qy - j4SrGT4OWsGYVSDoql2l/w0SGKaw68zBCYJhaI48EvztPsJIO1VwCGjhYbpj - R6gAemOpmYAXMoD+2uei+ZSHwyyNZraXHUwYnJVLKSzAGAkhr7XWv/L4+s9+ - kEOCnEmJ84I40hPKnwuY4VTaMmq3UzI4KvS0pFx5j7c3GnX5XRcP+LcuyrxB - eE2tC6G+naiGjXL9M/V+vUPT21sfaRuCXRZHnkzP6gOiGiCCTevAyjbPH2fc - rBXGGg/et2IFZIEIdEMIH0DUIO10D8S1l526ODWxCWwnD8CmfnDxYajHdW3s - DO0PEjCCDN4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEENJfLNIsVAoEd0lc - lXN6TiOAggywLP849H4ful3AaaT/IxQF0L5R9ohoTsyVjIOkSX1c7MXTK7tg - uILL/LlqZWSsY9uE2glTFPXZR83DgArMF335+wNBDwhLVAUdf0b+BE8m7Lpg - DGMomJNgqFtDjNqvX6i3O6RH0Iz/zjwKDTHuWtBq739VE1d3x3IU7gNq64MN - oYA83C81YLys73la+ETrruAYUR+qxUNn+DdU0r894wHtSWrRQ4nIN5algsBI - mJx/k5pmii2k5bWhPAM6FMsJfaUKHRTz5r1ngHry+LcOFzotGmDhFsndqaKv - FBnP9tC7v3JlMzcMVN5hI4oZXkURsiZMuFK19UClf6+50qh0VIp6u5xG4tcb - t8zumv1wWySZnRNFgF4eXcvDY8w4G0nyaYreN5JcP/vE6OFXGqu2hqi0/Dl3 - 9Y9775N8YphqZBWZdCPFVEA0eh3aC1zhLeM9wo00koDTjaALs9Vp7CSsA4j3 - G/Y3Mq2muQmiz9vxcgLc+x6ooD2BKIgveZmLr49zEd4kmHThkhZbj4l8ZCBl - 7GVRuLleV/D/zXEpejPuFd/rd0dHV0qkKdbjEHi4gjr5ZXcU/ZyAs+kyTk1O - 3OUxMVId487I5F/oUh4MkwqNJp1Fc8mKed/AYmB0bEG7aCvJGcK+G4LynTAZ - R2/XqVDq3wp3hfaEgwaVANpf+7z4Du+K5uqGlwkrzUov6wSgfNV84ddus/on - tLSqeeW8NFVnVaUw3mnfs+H/c+MLZvxYhLEELjfzHYsZEr/KwPgULoak60LZ - bjtsWI1ruI+YJu9F2f+PckOZyfwLEb19vLTJnyBYYZ6gCqWxGsgjDVL6G4V9 - /WcfrjrU0TopfPoPMtPlKRkltxef4xoSchcONQBwKNn6CJKkZSJHZ5WlciiM - BSdcKJj+fA8h/EXvZ3DVP1ka9PSEN3WU7REon9IWi74iLZOlzDRs0bCW4nhD - pphj67QfW0fpCbphw4RkYSp7WCe+s+GpRIKyg6KbM4wEVawqoTjWsvDSflcJ - CX7joJhvjdepWWwWX1yfX5lwFi1vqexGME0XtYVWrKItSKfVAbqRmDNx6GjJ - fImihwy7fhVsOtvDgo+nIGn779TfMvy6yQAWQ3cbGGg89mCHVumVEfn9nj3k - 14IMF97GHNTNSUIzCUw88DxjWVDyuqJNtpwNCFdorRpH1d3p3pEHM5GGvIFI - hkVdDmFgKPUpavEX+MBVP+INGvfQA8NFsTd14vaS3we48dH+BxMsp9omZlnJ - fZWcBlcsTlAf1mLjMqgkOy46b2+61MXVp/EkU1t+JOiHiVmT+SEloof4W+ti - xRxFOA9r2+k5iwprEJokojethAR/rZhMeq/U3mPeU4veo0uvdMNzSOeEejXV - ALcLridts1/tT+ggj7EPUThmxjO/iI5SF/HjFBOAy0vmBjfTCX6y52W3RpBf - Jk6e261a8fwaD8jEYJy/x7nbvBj1+yUhvHzvPsowQ1lIN6DLugg8aCyNprlB - r9/P4rj6t/cmFJrorMi9yoyk5oekQlg/OkQBu+vyvVjIvVmHhmZ5yGl26TUt - wJja48XhSE+S7arDKbZqDZro+/lALluOtdwpW8twwlaYmEBG0IPgm5PWtq6T - sRMpLGfUnhJrjGST0l9jOswgdngvW4gbcmKuN1HCEi/soj2QIcMEwRHRr4er - gECzO/TbL+OIt4I24TfQJhstfOd/s5rgGyuuhtd8Z83QCeUoZl3QmyYWzaNK - 6QKwdLZQAgrOPKnCE9Vp7lC0/NyjYWlFt0Cm48kJtAdv1pbV8I/W6QkoQHmU - Tx9XBuJPFspXmpZDrVNQvCBvM3Q/zTLDo4bh4EP6BP0US3GwPCH7dIqaqiIT - wi++3XeHtXhpJC5+D66Qy8WfAxhvCPIpufI8rjVl+DyzOikT7Uy5GCg7uhM7 - 3W/n8HBk2kOMq4EJOp5iq0Aa1zspi32oPTP/4VM3zq2J8TxgaWAWt6vY3K7Z - DeJesj8YWHLisCyjwjeShrCr7D6nmkmXCzl+m4/NF9Wqgk9RSPIE3RFYAa5A - 90dCj/mihDT01Dzt6D2TRBrGiXv8GX+Axt1OJDbJLESorqjkKq7+5qIiKA3+ - QSyWL2k/TNdTuXbk4s0ZC6/Zkagxysn2K5skngiKYIil7LuJVs+aQ9ZeEqXP - G8/kGX3m/Icg1XeKYjdkbnhTS71Jr40rrqXGzD7JmIxF9NvVyKweUOfDomPV - 7+/Ig3orrNn85oWpz1I0dNDuF3RPa0JLrSoSymRs7iygP13AlQJ4pXSqQ5JA - X66BD7GASdcMVcJkI5DH1vcLHWgqJLTOoSDl4SQLzcbksdFGDXcbtzppHLeV - wwfMiuiK3McgXJyAHMiRPMyGuzc1NViDROG8ysa1RaygVMeosNp/BZigCAPK - DGODa4C8LoQp5ynSPaLkPdCi+7lk/0UrIDgBaXnYHO1L1LA0ecwQsb02K789 - SmsZLX5iFgSPoREJXn/VQpJH+Td0bl2uZa6Rf0W7pmz34HnapiSln28VaTpe - OA04FC1JbQiV6DoU22iBz+gBlz4C1YtoZ0QrPrrpSr3SlVr6wZj7IrgBaKL+ - I7Bu1gA42UpgQ2Loy86rNtZOHNhruYRfW6k1TZxIHNFLFfs30XfMIfoGp8tg - +o3cxrN9vvRuLEUthPsosU6F5c7Y+1FOc9kJLzw6JVOOxpqAgHl2es8gJh5B - ni5q906VAy+UGsc6KF2cj5m0ZaszZxF/TC+mVmJqE1jv74eqdOqNeGE7O+US - IdCtJrtn4Uew6AXjo5bQsIBGM/I1OAF67ossbsjIJHmT1kKy1Rec7JlkZs7B - EXVS5h3nROi/3ImCnqdf+HaZw3xsWaHs17JekLbE+7mSuidU1XCvVFxChN1s - HILG6xuf2oh3f1KsxqgR0OOyiNf5XikgkAn71lCT0DSd1K69uEzCyfsgfRMf - pmtmLeB/Xn+SQAlCxxgeeDwcc/tao2G015weu3t9fs1LRsFCiF0Q66yVr8kp - dJ/lfTNkr6oFz0e20D0ZsjOOGIJDZHlA6fz9hiIz4VHMUrt+JHdPMiIwIGaA - tXGkHU+od8fp7QsQJ+Es1L4wEHO7D18RzZzqoJUShkdDOELTy+kb3cI++o26 - 0pD7FwsN9LtqHi7fh8dzetBOKWpVEkOVoEjYX3RBPZHimUJfTC9prG+SsyI9 - KrJNmBrd4/sWadfHGInht2xaAfcdpOqF7BsXGWeM8zuythAyy5dyg9w31oLL - hszXRQD/aIxrmXhT0Fp3j53gIHqH9o/kBvMd81OqfnWsgqwMxgH4x7l5+zbA - LpWBuJNP9rNQYKnWtgmLXAefYPDb0MddluyhuhQrkOZMGN8sJXj/0ZOhb/Hy - gM1RBr9Qx2YI7YsBZgZ+27nwOH6AXZtzCktMin9C/fxh+e4/YdUMtA3ciOmR - WH1itD+tA3enNBpLuiL7qs0a51AXBWtjj8nQD+CK4dRMTvP+tUuV06ghgmgs - VyvfeSd2DU2szu6BR5WTfg0jUxy09zWnK2Hc3eazGrJR3rg/BL8EKv9DTOXT - US/LJrmzdFH3T7qdtHm9gX1OPYxNIPUOL6i3HxRIQ/iPpAqQpWCZtIzgOXzh - 9AsKT4INrUBVdYGl+ox6WaPzJ/2ZyWduOTP3PxopBXD5khn+y6Kl96W0CaR1 - A7VEMLHnrx++cYJn3S1Y0S4QLyvgZe27HIoA47Xx6RT2lxb++wxefIs3U+hJ - 98eBY8MMUWng3t4RoCYMQpMgh0q4VuKkQDJsdE2yW7elRWG3tfAW5AR6P2pu - jg4pclb3nFEDNWaKTtgYjtLljy6zBKqC2FUASNMeqs+YQC/ZR5v+monKt1Mf - H5ZIJFAojQ+J9ce6GVC82+wqolVKCnzI0pJAJ5iXhiiNLxZBfO5NdYCEMg6U - plW4nyl/0UrYI6p8VuMMFMZStf6QMPY+Gyz2/3jDdWH7CEaSrrHba1iz69jg - F24Ts8m7BQefJhKsBwxbhCJisijfp0Q2Wrwi9p3upzalYQqG6Il/cr0b6NMv - ZFoFMO0YlM6sEpGrs/mMEgoiSlPXVMciRpV4PWLiZMqRTmnsxnHPKCeMEkwq - DPOcDtcL1RUiFiohwx345kNwKqeu5VO43A2v6ppFdTaE3N1v2ws8X+/3JEXn - d1i7bkBQjer0NQEOnVCxrO+uOOOVvmtUkVk8QJi9oCBQMUJJ3gm9HZXwvEYV - QHfjLm7Vy2L/2vsAqJHmaYwLJbnCO4KbCGzoLFBBE2gz17wYIPIgDbVxjNRu - W1HABIXMJ8IEQJnN9mDYZWjUsutf8FRFsfAPMoAGX5M5tLVrTUQbXUjtpJ6v - RA3cuu7epXa+RGV/NdgBV1k=] + ENC[PKCS7,MIIOHQYJKoZIhvcNAQcDoIIODjCCDgoCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAndhxooQI/m9cfD6jfWVHSce7ePzRwpt8F4qy + j4SrGT4OWsGYVSDoql2l/w0SGKaw68zBCYJhaI48EvztPsJIO1VwCGjhYbpj + R6gAemOpmYAXMoD+2uei+ZSHwyyNZraXHUwYnJVLKSzAGAkhr7XWv/L4+s9+ + kEOCnEmJ84I40hPKnwuY4VTaMmq3UzI4KvS0pFx5j7c3GnX5XRcP+LcuyrxB + eE2tC6G+naiGjXL9M/V+vUPT21sfaRuCXRZHnkzP6gOiGiCCTevAyjbPH2fc + rBXGGg/et2IFZIEIdEMIH0DUIO10D8S1l526ODWxCWwnD8CmfnDxYajHdW3s + DO0PEjCCDN4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEENJfLNIsVAoEd0lc + lXN6TiOAggywLP849H4ful3AaaT/IxQF0L5R9ohoTsyVjIOkSX1c7MXTK7tg + uILL/LlqZWSsY9uE2glTFPXZR83DgArMF335+wNBDwhLVAUdf0b+BE8m7Lpg + DGMomJNgqFtDjNqvX6i3O6RH0Iz/zjwKDTHuWtBq739VE1d3x3IU7gNq64MN + oYA83C81YLys73la+ETrruAYUR+qxUNn+DdU0r894wHtSWrRQ4nIN5algsBI + mJx/k5pmii2k5bWhPAM6FMsJfaUKHRTz5r1ngHry+LcOFzotGmDhFsndqaKv + FBnP9tC7v3JlMzcMVN5hI4oZXkURsiZMuFK19UClf6+50qh0VIp6u5xG4tcb + t8zumv1wWySZnRNFgF4eXcvDY8w4G0nyaYreN5JcP/vE6OFXGqu2hqi0/Dl3 + 9Y9775N8YphqZBWZdCPFVEA0eh3aC1zhLeM9wo00koDTjaALs9Vp7CSsA4j3 + G/Y3Mq2muQmiz9vxcgLc+x6ooD2BKIgveZmLr49zEd4kmHThkhZbj4l8ZCBl + 7GVRuLleV/D/zXEpejPuFd/rd0dHV0qkKdbjEHi4gjr5ZXcU/ZyAs+kyTk1O + 3OUxMVId487I5F/oUh4MkwqNJp1Fc8mKed/AYmB0bEG7aCvJGcK+G4LynTAZ + R2/XqVDq3wp3hfaEgwaVANpf+7z4Du+K5uqGlwkrzUov6wSgfNV84ddus/on + tLSqeeW8NFVnVaUw3mnfs+H/c+MLZvxYhLEELjfzHYsZEr/KwPgULoak60LZ + bjtsWI1ruI+YJu9F2f+PckOZyfwLEb19vLTJnyBYYZ6gCqWxGsgjDVL6G4V9 + /WcfrjrU0TopfPoPMtPlKRkltxef4xoSchcONQBwKNn6CJKkZSJHZ5WlciiM + BSdcKJj+fA8h/EXvZ3DVP1ka9PSEN3WU7REon9IWi74iLZOlzDRs0bCW4nhD + pphj67QfW0fpCbphw4RkYSp7WCe+s+GpRIKyg6KbM4wEVawqoTjWsvDSflcJ + CX7joJhvjdepWWwWX1yfX5lwFi1vqexGME0XtYVWrKItSKfVAbqRmDNx6GjJ + fImihwy7fhVsOtvDgo+nIGn779TfMvy6yQAWQ3cbGGg89mCHVumVEfn9nj3k + 14IMF97GHNTNSUIzCUw88DxjWVDyuqJNtpwNCFdorRpH1d3p3pEHM5GGvIFI + hkVdDmFgKPUpavEX+MBVP+INGvfQA8NFsTd14vaS3we48dH+BxMsp9omZlnJ + fZWcBlcsTlAf1mLjMqgkOy46b2+61MXVp/EkU1t+JOiHiVmT+SEloof4W+ti + xRxFOA9r2+k5iwprEJokojethAR/rZhMeq/U3mPeU4veo0uvdMNzSOeEejXV + ALcLridts1/tT+ggj7EPUThmxjO/iI5SF/HjFBOAy0vmBjfTCX6y52W3RpBf + Jk6e261a8fwaD8jEYJy/x7nbvBj1+yUhvHzvPsowQ1lIN6DLugg8aCyNprlB + r9/P4rj6t/cmFJrorMi9yoyk5oekQlg/OkQBu+vyvVjIvVmHhmZ5yGl26TUt + wJja48XhSE+S7arDKbZqDZro+/lALluOtdwpW8twwlaYmEBG0IPgm5PWtq6T + sRMpLGfUnhJrjGST0l9jOswgdngvW4gbcmKuN1HCEi/soj2QIcMEwRHRr4er + gECzO/TbL+OIt4I24TfQJhstfOd/s5rgGyuuhtd8Z83QCeUoZl3QmyYWzaNK + 6QKwdLZQAgrOPKnCE9Vp7lC0/NyjYWlFt0Cm48kJtAdv1pbV8I/W6QkoQHmU + Tx9XBuJPFspXmpZDrVNQvCBvM3Q/zTLDo4bh4EP6BP0US3GwPCH7dIqaqiIT + wi++3XeHtXhpJC5+D66Qy8WfAxhvCPIpufI8rjVl+DyzOikT7Uy5GCg7uhM7 + 3W/n8HBk2kOMq4EJOp5iq0Aa1zspi32oPTP/4VM3zq2J8TxgaWAWt6vY3K7Z + DeJesj8YWHLisCyjwjeShrCr7D6nmkmXCzl+m4/NF9Wqgk9RSPIE3RFYAa5A + 90dCj/mihDT01Dzt6D2TRBrGiXv8GX+Axt1OJDbJLESorqjkKq7+5qIiKA3+ + QSyWL2k/TNdTuXbk4s0ZC6/Zkagxysn2K5skngiKYIil7LuJVs+aQ9ZeEqXP + G8/kGX3m/Icg1XeKYjdkbnhTS71Jr40rrqXGzD7JmIxF9NvVyKweUOfDomPV + 7+/Ig3orrNn85oWpz1I0dNDuF3RPa0JLrSoSymRs7iygP13AlQJ4pXSqQ5JA + X66BD7GASdcMVcJkI5DH1vcLHWgqJLTOoSDl4SQLzcbksdFGDXcbtzppHLeV + wwfMiuiK3McgXJyAHMiRPMyGuzc1NViDROG8ysa1RaygVMeosNp/BZigCAPK + DGODa4C8LoQp5ynSPaLkPdCi+7lk/0UrIDgBaXnYHO1L1LA0ecwQsb02K789 + SmsZLX5iFgSPoREJXn/VQpJH+Td0bl2uZa6Rf0W7pmz34HnapiSln28VaTpe + OA04FC1JbQiV6DoU22iBz+gBlz4C1YtoZ0QrPrrpSr3SlVr6wZj7IrgBaKL+ + I7Bu1gA42UpgQ2Loy86rNtZOHNhruYRfW6k1TZxIHNFLFfs30XfMIfoGp8tg + +o3cxrN9vvRuLEUthPsosU6F5c7Y+1FOc9kJLzw6JVOOxpqAgHl2es8gJh5B + ni5q906VAy+UGsc6KF2cj5m0ZaszZxF/TC+mVmJqE1jv74eqdOqNeGE7O+US + IdCtJrtn4Uew6AXjo5bQsIBGM/I1OAF67ossbsjIJHmT1kKy1Rec7JlkZs7B + EXVS5h3nROi/3ImCnqdf+HaZw3xsWaHs17JekLbE+7mSuidU1XCvVFxChN1s + HILG6xuf2oh3f1KsxqgR0OOyiNf5XikgkAn71lCT0DSd1K69uEzCyfsgfRMf + pmtmLeB/Xn+SQAlCxxgeeDwcc/tao2G015weu3t9fs1LRsFCiF0Q66yVr8kp + dJ/lfTNkr6oFz0e20D0ZsjOOGIJDZHlA6fz9hiIz4VHMUrt+JHdPMiIwIGaA + tXGkHU+od8fp7QsQJ+Es1L4wEHO7D18RzZzqoJUShkdDOELTy+kb3cI++o26 + 0pD7FwsN9LtqHi7fh8dzetBOKWpVEkOVoEjYX3RBPZHimUJfTC9prG+SsyI9 + KrJNmBrd4/sWadfHGInht2xaAfcdpOqF7BsXGWeM8zuythAyy5dyg9w31oLL + hszXRQD/aIxrmXhT0Fp3j53gIHqH9o/kBvMd81OqfnWsgqwMxgH4x7l5+zbA + LpWBuJNP9rNQYKnWtgmLXAefYPDb0MddluyhuhQrkOZMGN8sJXj/0ZOhb/Hy + gM1RBr9Qx2YI7YsBZgZ+27nwOH6AXZtzCktMin9C/fxh+e4/YdUMtA3ciOmR + WH1itD+tA3enNBpLuiL7qs0a51AXBWtjj8nQD+CK4dRMTvP+tUuV06ghgmgs + VyvfeSd2DU2szu6BR5WTfg0jUxy09zWnK2Hc3eazGrJR3rg/BL8EKv9DTOXT + US/LJrmzdFH3T7qdtHm9gX1OPYxNIPUOL6i3HxRIQ/iPpAqQpWCZtIzgOXzh + 9AsKT4INrUBVdYGl+ox6WaPzJ/2ZyWduOTP3PxopBXD5khn+y6Kl96W0CaR1 + A7VEMLHnrx++cYJn3S1Y0S4QLyvgZe27HIoA47Xx6RT2lxb++wxefIs3U+hJ + 98eBY8MMUWng3t4RoCYMQpMgh0q4VuKkQDJsdE2yW7elRWG3tfAW5AR6P2pu + jg4pclb3nFEDNWaKTtgYjtLljy6zBKqC2FUASNMeqs+YQC/ZR5v+monKt1Mf + H5ZIJFAojQ+J9ce6GVC82+wqolVKCnzI0pJAJ5iXhiiNLxZBfO5NdYCEMg6U + plW4nyl/0UrYI6p8VuMMFMZStf6QMPY+Gyz2/3jDdWH7CEaSrrHba1iz69jg + F24Ts8m7BQefJhKsBwxbhCJisijfp0Q2Wrwi9p3upzalYQqG6Il/cr0b6NMv + ZFoFMO0YlM6sEpGrs/mMEgoiSlPXVMciRpV4PWLiZMqRTmnsxnHPKCeMEkwq + DPOcDtcL1RUiFiohwx345kNwKqeu5VO43A2v6ppFdTaE3N1v2ws8X+/3JEXn + d1i7bkBQjer0NQEOnVCxrO+uOOOVvmtUkVk8QJi9oCBQMUJJ3gm9HZXwvEYV + QHfjLm7Vy2L/2vsAqJHmaYwLJbnCO4KbCGzoLFBBE2gz17wYIPIgDbVxjNRu + W1HABIXMJ8IEQJnN9mDYZWjUsutf8FRFsfAPMoAGX5M5tLVrTUQbXUjtpJ6v + RA3cuu7epXa+RGV/NdgBV1k=] profiles::icinga2_master::master_key: > - ENC[PKCS7,MIIOTQYJKoZIhvcNAQcDoIIOPjCCDjoCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAutSMdSCHNMnSQAidQt5A5eXTNNvVU1BsJxTb - lXX37CV5XjtRao7+B/hl8/QXXOf5neNCh/Q5yRcr47cyJnb4zFcJrIluWHeF - OSN4fDPogxIBixupVwWuEmxfDGUd+3QRmL8gEBXHVntzQPRW2AR7bgTldFy4 - d6XpVnFSGLkH2C/RdWeCnKsgumbBITo0mJnNvHB7H7tPHxMMvsIbJvmqu9lC - OxJPZXIXnY6TlLuuIPiHpzrGsToB4dKrUYlQ9Y9KHHFN2NCRfMUNZkAd7vLR - ZLzTFq7XK3CaDqmAMWisbI2kBHf7GAkZJky+vxeRRsJ2B2JREw/JmqF5tD+Y - aVZz9DCCDQ4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEECubd68R7PosC6nC - SnB2SqCAggzg3aZRHoxfBmvg91xRcWB2UKb2azHGHfHjatP7dcL5EQ3l8JGd - fwzaUkb92HEtLBV9VqlNEnuZS3MKRxZGJFTtZ/P/Sg+gla5BEHgSX6YnGW41 - s1JulZDqkrSecpnBQ3j+w9apExWv4dHFJJ4jlR+S1GaPh4RaKZisozc0Ln7+ - zTZKKRWl/NCDPIw4+gpPpAWVH2xGpmUAv/kW1BGw1WQJDvr5sZ0+TgYybQbu - 24PI7u59wvyHiQx/qNmlk11AAw2ysvTG9hbwc0JrfbinV6eE6ibB/tloQNAl - /eGeNxxwOIKRFMQanWzsCUctdbUJxDoIyMBnFEf8muiLW/t4IND7+D/jK+wb - UnwKsZJv9uwzgGAAy2RANTDoOjPnxAN1Ikx9TapGd/TnyN1LvwGKw2YbqgBX - dyUqanIrHgr4SVvCr71Acw8qbUvt6NPMIgEAmF7+JD2J220WxpUu3yqYD9aS - i0XCmTW03ObUQVqJaW/weO7PzaPcN7hhHt/XnJC/ezXCpQl8+yc3cKyjUJY1 - NI2RHztyp6Oill4FvBAkc1XAyVQGy8bpkAYh63ozQPuv9GlaCeL51/PYa6K9 - AGHXPh7Zf96hpeY0qNyW3W6vu8gvL3ApGUxkI+dimC/wfwQuR5969aCYxNtu - siRVEUHXpIEZcGqP6dFDHieu3XC3/Dq9EPUvQ2gMO8M/SKAa4t0Ga5u2nvhD - xKO/UdbnP1SD9sBiL6Tlqp+iw3K+7opCho+2mJ5Z6+finL5I4ih9pNW/BONM - TN0J9ySDA7fFBMCM0mMlgkvd6/xts63tq8TxNn3SpJxL7RZTp2DDu8aH+gto - e1nDtg+f4LJwBbCpLNbN6G0Blq5IMoo0jTDuddJTig6/xaY1AcrKIWI8ZqHR - FAaFRJw0mhpn3R6psrEU464tvKQD5jQtlwUkYSV7M2CX9cGtgO0mw2YtNM/X - xTrOyymSxO64zQDce2N0m6p4/jPUPna2NLcLhxRvA4x9Esn8TEsyAUOOPv2L - 5fKQhOAfJmy7WxAR44phUexnsZIL6YculN+wJdkmBjYVrNm9b5XndXecbr09 - knseandJDRPShJkVILCQ/HqlDGMy3Bg4IGup3jGW495o5NHF69ExmGHFu7zi - NAL2DwEqgJnfOllkwT6WTgGsJp8mXhg/2kY5zAJTb69dWGMGKKR1pHrJSyql - f3F6gPkop6Om0I795+u0eQPPQJu3/48n+1wvHuHG6gGLQI/2vqTv5f1cSz96 - qCQ/5T/LQzrLwpsIlsrS6TBlboPEUHgw9v62naSVWwwqVZm4BRJQi+O1gqtw - Fwp+mNSn8RIZD7SVdlpGD0141FSYDXS3KuS3Qm9NCBSxVBrXgW/xKy02vDKb - 4eAmkxDB80VeTOLoq08bO+8gA6kksXEO6JR6ZEhH9d6DbyvwfgYws82sTi9V - 4t31pAFyFr2lERrP8dNchwiNbMrSYyY77+ko6MG0V/oAxPlPQyzNzM139JRz - H2vzIW/wq8+tNRDdvF7M0iK8EdPUj/Q6Q+BBKREp98ArjmjFLEWx8nRLjy48 - O9BzJ9ZGZlKKxPwx3uFptPHMn//syZmVdEfqHdsXO1AWRbqOqj5dB65Dq/m4 - +Bo/kXJAL/thltK7uO/F/yKrh686Dl2l49uQbTpksi7Sa/b+CHmWFmkzKvQH - eJ2SOdjjRjST83dlc8QMjkF2WqYf450j6rd2KzK32ZoeQbd9z7yM9/6imbs5 - n7Cz6J7UE37EFdCO5YdAmnHEYrkJsF9MhSMYLfHa1t5UxeoYuTWdQLJ0k/G+ - g/bI1UraseYYZjh6ldxU0skCW/aS58nFurFFlqBYdnKaUyH1IQ0EWCG1XMzn - qpI1rjtVy5LKi5aTFYYerXXmzYgNJo36YqP+7yYr+W4MQhT1px79dFLPTd/G - dlu1SlDMjkT5e/XS08nGxgIMXgbZP1bRlX8mx0sqkjlfEiQ1bLGavDyrz+aV - p5SpdGXpTREg+svWtrdCPMSne7AdSUhjlKFOwSDz4TWWojKv81LWys9OmeDI - dE8urQTOxcTgp1CL7PElWb5Yizl70PvBqBKQW6iXtZzRvislnYmhctcUu2T+ - bwjEt4YIp1SwuklXdm4sskGpRSmGxYmqWEg7gasSVoQLdlLIUYG5EcyinTOe - wTuaZUnUjiCznLVn0Y2Ti8PF7dH4Dfm4SO8ZAyR8F68CLDsgefoaMfPo3mYg - Y4R5OywpS1ma90tpliF9IPh7YS66sUJS5GS7KFbeHRRxyLGUQM/fO/SgD48T - nIEKFDeqbVOHmyvUVQCTc6+1QLnWrh6ywc7WO3Li/MCEheuL7WVd+ANfrjUe - E1s+GIGg4TFc9CDCkDck/oc94gL7VtOJqgVpIy1XhtF1akaIbSoEJoP4oR0E - l4YpEEDX+v4CwGAeVfnHsnPCXgF73OTbxsg6604YChK7SXxdKMuBR0ThmEFM - Ir3aC56wR3Lbbjo4IVAUH9HvhImuJZ9h4mkl5DwCsAa+z7Zf8DYlDiz8ssrz - LvByHO018A+Ox/7pKekMVIiF8nboNNsDDgqblGkKkLRWOwHB3J/w5zeB/m5P - +iPSsB7Jp9g4QTUdG+PBoDQ7MI/i2vz7qnttP8KT4mDqd0ivznr9jWnrVL+v - SrDvH80hoa7sIcHaWjeMXUWTh0b0D/cMi5wSE5fG0kiZU5/cSiA+pVzgBO0A - 3+QXg+AYO60f233fkuvpJtdc6m4/E9pnKsXSsyGFPzn6/fUYDktzyYycOmnc - G/8fwwWT8iiUujpOb1vt/uR7GN4Ctph5F1pcR+YaqAi8URQPM0qrHL5EsmJH - HGhXzdc/M4HisYF0/TIhYDQqim0Uw7z0P1YRhW0TZiLtdwBYowQYfa9VJExX - HMGm7ljcb2WIrxdWqzAjo2mrae0spGwBsMimfJOQo7t1DPtceBYrQdzONcM5 - EiJcRjb0+vDMCUqfT9G0hJh/5T1YexZg2uCtQTX2spglQYGA/XCVxhQwhY8j - PKGEwgo8tL13dfuxsRzyZH/VdKfcw4O1tXXIIrrIcrRZ3XIWXXlnd+dDHPwr - cnqlas2ZEXhgl2JufICUBtt0fUSjwrvaMXpHCo1SZLaAAOXrpZQ5q/dC4Mv1 - KWAyllfGdFMY9152DUlpwieZuFSyN8KFOib3e+ADyfaFBdybrItvbGyftgRU - xS817bHHlCkOZ+Wm35/GZsTZgPtp2q4MvJXVLNtZp7NL1V7Ya62ww154ZOY/ - RbyKLdzUrb4SezX4Ie9KEZH78dTzTKxKZgtjkW1x466HMv8FSMsSDL87hV9Q - B8T+zVTRMCs+fYXqi8BXdUBMT6j/CRw57U8Dwg+ECwBlyIFsdwkKCYoUGn5u - m5575yug7bsA1+qJbEMAH8JbhFWWu6p0Tqdfy+++4y6dGJ6EAfdnXnNdvO5l - yWl575+iUMgkFQONbcfwkrESuCaZA/kLkVIXkB89LTjPUrfQldYSc+g0Ycdu - xf0m9IDT5lcF3JFgEjr+cYQx5AR3VmFeHE2rQlZgxaBtAaQ7heGRUCYCcGFq - 2CAMf0+A9Ps7i8TWA5HtxQHRA+8pLX7XYV+RYSfkravU2CUueTVFyKBrxjL1 - MkVh1TyVgkdxYsGtZfwYmxnSqgbnJM9q6g/IgCwLkFWnSx4ie6b7ViWiC7yI - 0AFK/xnqAAAKe0Ea35xJIoH7oCq8GClCMlf4Le8xm9/7CI1C1DMQT70pdORw - U1bAKkFNxm6gSG0qcjFemeiUvUgHJKW0qOYsSLSUF2ff53GpDkzjfoFOITol - PSIeSUVKF2kFR0rM8ua3wYypD1TDPxXSILfdAGOrvo6FUunB+QrScjbC5ra7 - mpTZcofdgIo5yOdI2AoBoCS5RIB+jDPBoXijqZwHcW2ALPHgiIoaWQXDn+9v - zYsYcjM/82MaJi/v14FfC1qlbtLcCsaVWWYU7Sev0zAdGQR5W9efLkXHoR+z - VUL9Itaghxs781cxUUzz39KzxSQxHXvD7BRdDCqLjSO9cXrCmRJAlASC1mvU - Mbdey/FtflKXb1icJIP9khSdN0lRmMSixg+kCYaC5FPSBPQNj133rQ5UQOrx - CjYeVJwbQOc/Qs1m1vkJ7FO5ayHX5jhgFSCrbG1modbpaSU4h4yaPGTe2DUz - kdFTFUSa6MO+OCiw2FNhW5mW71zl5RiF7//zq5TNg4bcA/cwQ9yM7qjMoKMx - jygQIqVIvSVzvhQ3YuMhuDE1/CyD3bBJOhCPaApS5TCOQmG1gxLLZ7GWC0mE - qMAiqHBqbsfnUiGmmOJNlq3GLT9zrnwfNjtHd0iNOS9ywKXv/z5huJEe+ody - kJzAgE2N8q67q07xvVlVjgczpx5Unoqr0T7WMm4qfjMETvzvnXZDWQGblQLz - 7VhxsSi51i50RV767AFtbk6GAgw=] + ENC[PKCS7,MIIOTQYJKoZIhvcNAQcDoIIOPjCCDjoCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAutSMdSCHNMnSQAidQt5A5eXTNNvVU1BsJxTb + lXX37CV5XjtRao7+B/hl8/QXXOf5neNCh/Q5yRcr47cyJnb4zFcJrIluWHeF + OSN4fDPogxIBixupVwWuEmxfDGUd+3QRmL8gEBXHVntzQPRW2AR7bgTldFy4 + d6XpVnFSGLkH2C/RdWeCnKsgumbBITo0mJnNvHB7H7tPHxMMvsIbJvmqu9lC + OxJPZXIXnY6TlLuuIPiHpzrGsToB4dKrUYlQ9Y9KHHFN2NCRfMUNZkAd7vLR + ZLzTFq7XK3CaDqmAMWisbI2kBHf7GAkZJky+vxeRRsJ2B2JREw/JmqF5tD+Y + aVZz9DCCDQ4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEECubd68R7PosC6nC + SnB2SqCAggzg3aZRHoxfBmvg91xRcWB2UKb2azHGHfHjatP7dcL5EQ3l8JGd + fwzaUkb92HEtLBV9VqlNEnuZS3MKRxZGJFTtZ/P/Sg+gla5BEHgSX6YnGW41 + s1JulZDqkrSecpnBQ3j+w9apExWv4dHFJJ4jlR+S1GaPh4RaKZisozc0Ln7+ + zTZKKRWl/NCDPIw4+gpPpAWVH2xGpmUAv/kW1BGw1WQJDvr5sZ0+TgYybQbu + 24PI7u59wvyHiQx/qNmlk11AAw2ysvTG9hbwc0JrfbinV6eE6ibB/tloQNAl + /eGeNxxwOIKRFMQanWzsCUctdbUJxDoIyMBnFEf8muiLW/t4IND7+D/jK+wb + UnwKsZJv9uwzgGAAy2RANTDoOjPnxAN1Ikx9TapGd/TnyN1LvwGKw2YbqgBX + dyUqanIrHgr4SVvCr71Acw8qbUvt6NPMIgEAmF7+JD2J220WxpUu3yqYD9aS + i0XCmTW03ObUQVqJaW/weO7PzaPcN7hhHt/XnJC/ezXCpQl8+yc3cKyjUJY1 + NI2RHztyp6Oill4FvBAkc1XAyVQGy8bpkAYh63ozQPuv9GlaCeL51/PYa6K9 + AGHXPh7Zf96hpeY0qNyW3W6vu8gvL3ApGUxkI+dimC/wfwQuR5969aCYxNtu + siRVEUHXpIEZcGqP6dFDHieu3XC3/Dq9EPUvQ2gMO8M/SKAa4t0Ga5u2nvhD + xKO/UdbnP1SD9sBiL6Tlqp+iw3K+7opCho+2mJ5Z6+finL5I4ih9pNW/BONM + TN0J9ySDA7fFBMCM0mMlgkvd6/xts63tq8TxNn3SpJxL7RZTp2DDu8aH+gto + e1nDtg+f4LJwBbCpLNbN6G0Blq5IMoo0jTDuddJTig6/xaY1AcrKIWI8ZqHR + FAaFRJw0mhpn3R6psrEU464tvKQD5jQtlwUkYSV7M2CX9cGtgO0mw2YtNM/X + xTrOyymSxO64zQDce2N0m6p4/jPUPna2NLcLhxRvA4x9Esn8TEsyAUOOPv2L + 5fKQhOAfJmy7WxAR44phUexnsZIL6YculN+wJdkmBjYVrNm9b5XndXecbr09 + knseandJDRPShJkVILCQ/HqlDGMy3Bg4IGup3jGW495o5NHF69ExmGHFu7zi + NAL2DwEqgJnfOllkwT6WTgGsJp8mXhg/2kY5zAJTb69dWGMGKKR1pHrJSyql + f3F6gPkop6Om0I795+u0eQPPQJu3/48n+1wvHuHG6gGLQI/2vqTv5f1cSz96 + qCQ/5T/LQzrLwpsIlsrS6TBlboPEUHgw9v62naSVWwwqVZm4BRJQi+O1gqtw + Fwp+mNSn8RIZD7SVdlpGD0141FSYDXS3KuS3Qm9NCBSxVBrXgW/xKy02vDKb + 4eAmkxDB80VeTOLoq08bO+8gA6kksXEO6JR6ZEhH9d6DbyvwfgYws82sTi9V + 4t31pAFyFr2lERrP8dNchwiNbMrSYyY77+ko6MG0V/oAxPlPQyzNzM139JRz + H2vzIW/wq8+tNRDdvF7M0iK8EdPUj/Q6Q+BBKREp98ArjmjFLEWx8nRLjy48 + O9BzJ9ZGZlKKxPwx3uFptPHMn//syZmVdEfqHdsXO1AWRbqOqj5dB65Dq/m4 + +Bo/kXJAL/thltK7uO/F/yKrh686Dl2l49uQbTpksi7Sa/b+CHmWFmkzKvQH + eJ2SOdjjRjST83dlc8QMjkF2WqYf450j6rd2KzK32ZoeQbd9z7yM9/6imbs5 + n7Cz6J7UE37EFdCO5YdAmnHEYrkJsF9MhSMYLfHa1t5UxeoYuTWdQLJ0k/G+ + g/bI1UraseYYZjh6ldxU0skCW/aS58nFurFFlqBYdnKaUyH1IQ0EWCG1XMzn + qpI1rjtVy5LKi5aTFYYerXXmzYgNJo36YqP+7yYr+W4MQhT1px79dFLPTd/G + dlu1SlDMjkT5e/XS08nGxgIMXgbZP1bRlX8mx0sqkjlfEiQ1bLGavDyrz+aV + p5SpdGXpTREg+svWtrdCPMSne7AdSUhjlKFOwSDz4TWWojKv81LWys9OmeDI + dE8urQTOxcTgp1CL7PElWb5Yizl70PvBqBKQW6iXtZzRvislnYmhctcUu2T+ + bwjEt4YIp1SwuklXdm4sskGpRSmGxYmqWEg7gasSVoQLdlLIUYG5EcyinTOe + wTuaZUnUjiCznLVn0Y2Ti8PF7dH4Dfm4SO8ZAyR8F68CLDsgefoaMfPo3mYg + Y4R5OywpS1ma90tpliF9IPh7YS66sUJS5GS7KFbeHRRxyLGUQM/fO/SgD48T + nIEKFDeqbVOHmyvUVQCTc6+1QLnWrh6ywc7WO3Li/MCEheuL7WVd+ANfrjUe + E1s+GIGg4TFc9CDCkDck/oc94gL7VtOJqgVpIy1XhtF1akaIbSoEJoP4oR0E + l4YpEEDX+v4CwGAeVfnHsnPCXgF73OTbxsg6604YChK7SXxdKMuBR0ThmEFM + Ir3aC56wR3Lbbjo4IVAUH9HvhImuJZ9h4mkl5DwCsAa+z7Zf8DYlDiz8ssrz + LvByHO018A+Ox/7pKekMVIiF8nboNNsDDgqblGkKkLRWOwHB3J/w5zeB/m5P + +iPSsB7Jp9g4QTUdG+PBoDQ7MI/i2vz7qnttP8KT4mDqd0ivznr9jWnrVL+v + SrDvH80hoa7sIcHaWjeMXUWTh0b0D/cMi5wSE5fG0kiZU5/cSiA+pVzgBO0A + 3+QXg+AYO60f233fkuvpJtdc6m4/E9pnKsXSsyGFPzn6/fUYDktzyYycOmnc + G/8fwwWT8iiUujpOb1vt/uR7GN4Ctph5F1pcR+YaqAi8URQPM0qrHL5EsmJH + HGhXzdc/M4HisYF0/TIhYDQqim0Uw7z0P1YRhW0TZiLtdwBYowQYfa9VJExX + HMGm7ljcb2WIrxdWqzAjo2mrae0spGwBsMimfJOQo7t1DPtceBYrQdzONcM5 + EiJcRjb0+vDMCUqfT9G0hJh/5T1YexZg2uCtQTX2spglQYGA/XCVxhQwhY8j + PKGEwgo8tL13dfuxsRzyZH/VdKfcw4O1tXXIIrrIcrRZ3XIWXXlnd+dDHPwr + cnqlas2ZEXhgl2JufICUBtt0fUSjwrvaMXpHCo1SZLaAAOXrpZQ5q/dC4Mv1 + KWAyllfGdFMY9152DUlpwieZuFSyN8KFOib3e+ADyfaFBdybrItvbGyftgRU + xS817bHHlCkOZ+Wm35/GZsTZgPtp2q4MvJXVLNtZp7NL1V7Ya62ww154ZOY/ + RbyKLdzUrb4SezX4Ie9KEZH78dTzTKxKZgtjkW1x466HMv8FSMsSDL87hV9Q + B8T+zVTRMCs+fYXqi8BXdUBMT6j/CRw57U8Dwg+ECwBlyIFsdwkKCYoUGn5u + m5575yug7bsA1+qJbEMAH8JbhFWWu6p0Tqdfy+++4y6dGJ6EAfdnXnNdvO5l + yWl575+iUMgkFQONbcfwkrESuCaZA/kLkVIXkB89LTjPUrfQldYSc+g0Ycdu + xf0m9IDT5lcF3JFgEjr+cYQx5AR3VmFeHE2rQlZgxaBtAaQ7heGRUCYCcGFq + 2CAMf0+A9Ps7i8TWA5HtxQHRA+8pLX7XYV+RYSfkravU2CUueTVFyKBrxjL1 + MkVh1TyVgkdxYsGtZfwYmxnSqgbnJM9q6g/IgCwLkFWnSx4ie6b7ViWiC7yI + 0AFK/xnqAAAKe0Ea35xJIoH7oCq8GClCMlf4Le8xm9/7CI1C1DMQT70pdORw + U1bAKkFNxm6gSG0qcjFemeiUvUgHJKW0qOYsSLSUF2ff53GpDkzjfoFOITol + PSIeSUVKF2kFR0rM8ua3wYypD1TDPxXSILfdAGOrvo6FUunB+QrScjbC5ra7 + mpTZcofdgIo5yOdI2AoBoCS5RIB+jDPBoXijqZwHcW2ALPHgiIoaWQXDn+9v + zYsYcjM/82MaJi/v14FfC1qlbtLcCsaVWWYU7Sev0zAdGQR5W9efLkXHoR+z + VUL9Itaghxs781cxUUzz39KzxSQxHXvD7BRdDCqLjSO9cXrCmRJAlASC1mvU + Mbdey/FtflKXb1icJIP9khSdN0lRmMSixg+kCYaC5FPSBPQNj133rQ5UQOrx + CjYeVJwbQOc/Qs1m1vkJ7FO5ayHX5jhgFSCrbG1modbpaSU4h4yaPGTe2DUz + kdFTFUSa6MO+OCiw2FNhW5mW71zl5RiF7//zq5TNg4bcA/cwQ9yM7qjMoKMx + jygQIqVIvSVzvhQ3YuMhuDE1/CyD3bBJOhCPaApS5TCOQmG1gxLLZ7GWC0mE + qMAiqHBqbsfnUiGmmOJNlq3GLT9zrnwfNjtHd0iNOS9ywKXv/z5huJEe+ody + kJzAgE2N8q67q07xvVlVjgczpx5Unoqr0T7WMm4qfjMETvzvnXZDWQGblQLz + 7VhxsSi51i50RV767AFtbk6GAgw=] profiles::icinga2_master::master_csr: | - -----BEGIN CERTIFICATE REQUEST----- - MIIEnjCCAoYCAQAwIzEhMB8GA1UEAwwYbW9uaXRvci5pbmZyYS5jYWNlcnQub3Jn - MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7Z9Yf0kd7Jo88QH/xhQN - YvZrm3rL2nIz+B67HFgQu6Q1o6wqYvn6bccTjdQFhrHcDob9XpoCs18IwDIG9fBh - NR5kph7XjVzv40vh3tjjzfkvoKzPyEDxJI98DTTkDKK3UfsvTL0PwlS1xrBRW8Ib - bKmqNNA7p8VJJanzJCv0k7idpLmmyKeRoBF0HFaGynFcoOwjoLib9polUExD8kSR - femOLwq46BGORX7id49J3DHPQv89dm4N0BPjnWGMd1x3puk+GgptEzFDNEigNmFe - rojMKqoIhNEi4+bB3tz/aU6Sn0vm4Jm0tnlkrdX7O1nBvTvrwBa6jt94v0n9amvF - V+LzKde4ukvn8FRoEmJMaiHgSMjlU0KwawhCqC67Rf+L+nwhi4o916BcLzCMkEHb - CAW04uBZJdj29BwvWkfd7rrydUMZuBJIsKydJ13H9/kWUlsgqXayWpMl7qrJSx7X - iY0Z909Nmu6+ZphlqesRcOFyZHB4hkBP8tZA9lYHOjSBFI340Fni38cMKrJQiyKA - ZXUQmE/i3a1J5ZXuKmYjhha4A3MtEvxrXbWP7rokYCqShJO72ThGM6RRwnEmyL4J - 46eRGHta3apZjOqjHjY9Za+bGbQFjQ12/YanP8DeXh4Y3vxwxu3jkUnOf0VF//qa - v52iYXn9PnJlQ2GhRtTWoccCAwEAAaA2MDQGCSqGSIb3DQEJDjEnMCUwIwYDVR0R - BBwwGoIYbW9uaXRvci5pbmZyYS5jYWNlcnQub3JnMA0GCSqGSIb3DQEBCwUAA4IC - AQCt2+BVjtxBcuXqcHyAHIWjFke7gWAC4LH8hm7Gt5mcg5EKYANC0d7UNPM7k9vU - bcZwN3sMYxfBLgrMZGpbzIXgRKxufMhTc1HSZzHs5Peq+pTz/F43dfxKOHZNWrW1 - PJoPUQwocK3MfKDjZVVnFT9PD1VwnhumTrGMRx+x/545F0tU2Zam0+vJor2VROzx - Y7aQ2v1K0Ac4pEigL9Ld1/mou2q5PyLR5DO0zo5/u8+QP6Oqslgy+FJ6OmUZZUua - 4G/1BVooLzbYIRRG/7kQNMmIIROQBCUP0upB7t9qvKvGs5JZwLLgv/M54yFtzI1z - bjrYZ1AbC/XutJ81jV9HplLS8XTne3Q2NJ+C3m61VizRp04INtPmKsH1Fj4stU3w - f0utTMTvcSeOsbIrl/rgeaEhou71sJdclqvSioAQlxdmAUqDPuffZgPnq5eeqNBL - 9Q1dfJWjNzgKrK5wSpa43wgentHOLDsgylju/L0oDP5L0JWvpXIsB2M/maBTRxUc - rZqKlRUxYBJ8XPsyzOQTgnJcZ+hmZTXZ7jDtP6qgLEtho+E0ubGtIpXBgeX5HN1U - yTxDP2rWDE3fKgm17An4i+n+6IU4u0M+3s1dE0wrKpzUC2VbKBPrsGTRPNKCny7W - UmvCla/Pixt8dYj9NTuBfoh5/m4A/uD/iVVVO54RA9u8Fg== - -----END CERTIFICATE REQUEST----- + -----BEGIN CERTIFICATE REQUEST----- + MIIEnjCCAoYCAQAwIzEhMB8GA1UEAwwYbW9uaXRvci5pbmZyYS5jYWNlcnQub3Jn + MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7Z9Yf0kd7Jo88QH/xhQN + YvZrm3rL2nIz+B67HFgQu6Q1o6wqYvn6bccTjdQFhrHcDob9XpoCs18IwDIG9fBh + NR5kph7XjVzv40vh3tjjzfkvoKzPyEDxJI98DTTkDKK3UfsvTL0PwlS1xrBRW8Ib + bKmqNNA7p8VJJanzJCv0k7idpLmmyKeRoBF0HFaGynFcoOwjoLib9polUExD8kSR + femOLwq46BGORX7id49J3DHPQv89dm4N0BPjnWGMd1x3puk+GgptEzFDNEigNmFe + rojMKqoIhNEi4+bB3tz/aU6Sn0vm4Jm0tnlkrdX7O1nBvTvrwBa6jt94v0n9amvF + V+LzKde4ukvn8FRoEmJMaiHgSMjlU0KwawhCqC67Rf+L+nwhi4o916BcLzCMkEHb + CAW04uBZJdj29BwvWkfd7rrydUMZuBJIsKydJ13H9/kWUlsgqXayWpMl7qrJSx7X + iY0Z909Nmu6+ZphlqesRcOFyZHB4hkBP8tZA9lYHOjSBFI340Fni38cMKrJQiyKA + ZXUQmE/i3a1J5ZXuKmYjhha4A3MtEvxrXbWP7rokYCqShJO72ThGM6RRwnEmyL4J + 46eRGHta3apZjOqjHjY9Za+bGbQFjQ12/YanP8DeXh4Y3vxwxu3jkUnOf0VF//qa + v52iYXn9PnJlQ2GhRtTWoccCAwEAAaA2MDQGCSqGSIb3DQEJDjEnMCUwIwYDVR0R + BBwwGoIYbW9uaXRvci5pbmZyYS5jYWNlcnQub3JnMA0GCSqGSIb3DQEBCwUAA4IC + AQCt2+BVjtxBcuXqcHyAHIWjFke7gWAC4LH8hm7Gt5mcg5EKYANC0d7UNPM7k9vU + bcZwN3sMYxfBLgrMZGpbzIXgRKxufMhTc1HSZzHs5Peq+pTz/F43dfxKOHZNWrW1 + PJoPUQwocK3MfKDjZVVnFT9PD1VwnhumTrGMRx+x/545F0tU2Zam0+vJor2VROzx + Y7aQ2v1K0Ac4pEigL9Ld1/mou2q5PyLR5DO0zo5/u8+QP6Oqslgy+FJ6OmUZZUua + 4G/1BVooLzbYIRRG/7kQNMmIIROQBCUP0upB7t9qvKvGs5JZwLLgv/M54yFtzI1z + bjrYZ1AbC/XutJ81jV9HplLS8XTne3Q2NJ+C3m61VizRp04INtPmKsH1Fj4stU3w + f0utTMTvcSeOsbIrl/rgeaEhou71sJdclqvSioAQlxdmAUqDPuffZgPnq5eeqNBL + 9Q1dfJWjNzgKrK5wSpa43wgentHOLDsgylju/L0oDP5L0JWvpXIsB2M/maBTRxUc + rZqKlRUxYBJ8XPsyzOQTgnJcZ+hmZTXZ7jDtP6qgLEtho+E0ubGtIpXBgeX5HN1U + yTxDP2rWDE3fKgm17An4i+n+6IU4u0M+3s1dE0wrKpzUC2VbKBPrsGTRPNKCny7W + UmvCla/Pixt8dYj9NTuBfoh5/m4A/uD/iVVVO54RA9u8Fg== + -----END CERTIFICATE REQUEST----- profiles::icinga2_master::icingaweb_admins: - icingaadmin - jandd@cacert.org @@ -312,79 +342,78 @@ profiles::icinga2_master::icingaweb_admins: - mario@cacert.org - dirk@cacert.org profiles::icinga2_certificates::certificates: - - - name: monitor_client + - name: monitor_client key: > - ENC[PKCS7,MIILLQYJKoZIhvcNAQcDoIILHjCCCxoCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAfMlzYDhHEBOZ0ePImcGVWe8jUv833wi0GsRG - oGrDtBq1G7bNe8Vjd+cpnuJtkIpvg4UUf6yU3rsMb3JL32rUUP9Jjhp8k/3D - 8WLadEKRjahlw9kh+/iaz1AGZGiWM4CSpSOKJ24sfFr9djWm8XY0qLakY3q5 - fwz9xjKIwRhyF2bb1Z92fKNDFYO7Wa9lD7zbf7BraUAWpfL26lrpGkrZmqtM - K4wd2RkVZe66azE0lT93aOIPrXwXWIVZL0u+6YFAQx5D/98qbtbwGEtabTSq - TTuTikkV6nsq7eblsH3zjkT8olE3cY62VBPq1lKQNTgBWmgBbvebeRzJj8q/ - gpZNdjCCCe4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEPjAQ+687nD2HSP7 - xVzkMIWAggnAQ6dpcwNyBBKLNr4uYDAZerNqErnpRRnnJ62FpE2pR/MokRNO - M309vB5EpbIBa09cn1PGMyQ7uaaIXydtUwxfeS6307Lfo46swoPyWvHNC+1B - ngpiohRSJhiOUR8IUc3uwXNZ8YP8mo3bcjH9heq1WDMeAla8FiBtrdog2Rev - bnD2A3S6ustUVIhdR9TCzIXgG1ExgW7oFUn5Iuppl8K6Wv9LPiCs/hLr20fy - mg7QJaHHy49rm+L0X5Sf0Jg+gfHEQY5qg2NTqCb88fpYh7t4g8R5HY4QFame - gFrj11ZeavxKrLakz0k0uB8weLUWWOE2xHj4mdh87obW5J/xwekZkYqOWHmU - PLEyg9X441EMCBSYWFRz9HEK2Zv9Vg0qxKe++DNikVwDT9ntEYHnh43e7Iwp - YKwvCtlxxvQGY09acLuC0l4pifpJOsqOcAUjxf3WXoe1cjsjEcL+Z3mMmerh - 8JyXxJRp5Cu6TTMxcnQb/214/D8qYCKoPUYMddNC1G+XVosNY8QWbNp8nLUL - DZHsvI0tgk+CV/SPRl68dx7cE1bYioyS4EausMQub4eQykZl5My9qRR5htSl - C2zw+CP47EhsaA3zodbj6UgdYGBmhZNUOiW3oXWTKV0eSddkWcS/CmY271a9 - 6UIzE2TlRQ4w85GI8aD0W4DbsPyUvG0oay/lFYI6TzG1d6sL0rn/n1vvuUHB - n1OSyMdzcnUS0V7mt3gmGIKCYfEjG1auMaXlLag/NPPi5lvAkn8t8fY0uRn9 - 3kYpAPCPHFpqP8L/ZwIyHf/ePvRszzbuU23wkmcguIx3+UqGvwOyaMTGiy1K - 0ML0PUCMHPVrVDjkIHf9Tee/eFbRP9toQEofeesQtSJY6jW5zCCa/EEmmazy - jyo1hdsSCcTpizMylT4NDGpdfc73ccMwoGcuSdTtlAolBhn0qbBvEMo/GQMZ - JmvvOlE0BlDUGxbXE4XTrjIS2tJIL6Mrg0nQEJLB8u41i9fDJdPai3dwYlYZ - oMUT/QX417fPKl88t6NwkfFpW8mgStqeZR0ataza5lzHC61d5C1z+Zxzh/yk - oCgwmWFcz2kS8woi//0t3DtJB93bFbV0za9FUodcKrEcLowx3mN+g+URe5n0 - w7On4tjl4PGo5ko/15DDcRRlJlzQlUN28n0w3ENYaAgHiNKsksvXxqTL+mRo - kDhszsQyaatutqtjN7Tj9t5p+gIkjODhz5FmQop+ZirXwNElMX7N3WeFD8Tl - zLhopOuZ0loqaKWgTEY1hdYUINfkHTNyLIxwyYtJGPAU30q/c5qZ8opmil96 - tk6kpctBVAeNYVBfRNJYkGfNRrK7AiENuLaWGurGt05J00lSKOEQQXQuLqGy - mPC694aJ26aqjinuWZ21TCLh+e+Oib0sVYWObCjy/cBGtMQAlvTGEt/1zs66 - K+r1C0PJkWcDwDAF0mwnxDxFq1zcPYBG8xH90DrSPMoN0edLFMencGVrqMBI - agbUlkwePUdEc34zZ1khJbuBU/B0O8IRNY9rFQrU9ICCnKPVFvym85f0y8Ac - BphEJrS61CDa/L7techS1GTP8joSoZnT/OzzqXRXBe9Pgp9hubcckbGwi20k - sP4sCoChKe99wR4760z+q4JV91aVR/aKqAB+5R7aKor4ouQSaC203XzpDcOv - x/t6+l4cPetOvV5dtqPtpv1L+nPoLr9w3JS+ZGLOwmXAAx7Zr/DD8RGd6hM/ - OHfplbHg4XYbbDG51OTj6ajRwDoDgcLQ6VHz4/3HmcaNff2VcY4DFxKSpv+D - WSoepaN+KB+o1B4YRQ3XyuYhcAL7UlMJzA0CBmezZ2AMLTfGIaxFtwnqDMEc - kJ+m7BP3cyk/E6CTBFVrQajC7C8Gs5nNqI1sS79pMk07S2dOX/MRFSP0hw8i - ploMyzV6tCPAF/h9OO510W3iOqSN6nQe61BGlTgMgWKut4VWunpqZyANkIvT - SIeTR09cpSI5fhWfMdjv07TocakibiWFRZpvpOd0dkVA0FR5BurPxYoUB0od - FkWPGlgfTVCVuVLfVjEgig2j+YzoZM3Y/GkVu7IVkaxGI8+/uq6Hyordk051 - uDxbNDiuq0mXfL6KTiPJ/3TVPPLUnnFvEdWvgLIg4wnHpXxpkF44dFkKF4/y - d5Ykxpc6eThoV8aIVMUl5dod68LjclHL0Iv3l7+rTE6qPrTiShONvQbIu8lv - 5KXBK6GdjTFWz8c9Lr6zR/ABQ+XhQAlCqmwhfp+rEr1qReBEus5U4bL1ObuB - 1AA0r6AlmjCLH9F9BA3PcNVi5Zm988chcoCjl1GTjeMVcK501l9/KYcSjIzZ - bfaguVPCiSGG0/imDQ/QiBtDNGKHbdknJlTjBBaGWJkCFu/vpV6uzjfzMXRO - FXc/E31UdogZfprKRt1c1WHW8ozo8hV6/2D4X+tB1Jn4bELIgSZRhB7d29tm - jAxd8kAsCDsIK5NX0VXXzenZcut1L10lDVHcr+WOTT5lbGLgZCa508ExdtQk - /FsgqnzNOrqlCBx2gYU9UcrMxlOf7teEHxJmoFMqe7II2M/ye6eBYdy515GR - ywU0R8pRUuSs8njm7rYeuzG3rCd1j4RCasjbmLQLkuAVlxPjys+Hxe07jb8b - N4VyAQsUaFruuwkIUanANJdaOA72IJyPJCZf4HCScQEKG1EkU6oHNDelE0J/ - J9zTdzuUSwfv74pk/2PExloRH42glTAB/FOoIenzrtO7XvsV+HAaqoqJQ1Gr - 7lvjwU0B8GMijM20YQPOzhc9H34BWya5Y8BAaTbue+puAIjfLQaMPIcy/ilh - qIrVd1sNXCJtXJ2Smo5O3wGI3Qw29pQn98x20pJUCwXwLtdRWSocSL7qWlAh - pofd1vZ+5F5iW1XOm9//SIZ3lgHlEsWwnBL1v6mETXPA6UezJGSm2fhI14xx - EnFI3t1K0+JSkHq45nyxHGfiS1KcHvrblNnGOHWfxKDjdIKADAMI6yP3pWrQ - 2kmTSMSRcAN9TQxd2sFsLVe7zpFxBagp1SaXzKC/VpmWQu6Y6BNt6EjmZ7+r - UjpnfOY8H2efR2aNzMEdvtz/mY9pdzLSHIDNSndM+RqccpbcyJKTQXIdjHiZ - iHpfoZJ6g4VdkaXVRttaNfjuuwuAJuUaxoSdDOeswHIOIeNQ2N8e5OE0U4r7 - xvd/XDaPh2AE1061vN+InhW9lC2QrIxSrHzQoz0uVVq23D1aMyin8UHTTo1e - h8zTkvycy4d/FiozapuXBuM49p8DgcX0kESTVnL4A99qzFr7PU4CWDQssgkU - WGs3X/Ut0GKaJXFMwajblcJu80p7HRmaXJWIBmwe] + ENC[PKCS7,MIILLQYJKoZIhvcNAQcDoIILHjCCCxoCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAfMlzYDhHEBOZ0ePImcGVWe8jUv833wi0GsRG + oGrDtBq1G7bNe8Vjd+cpnuJtkIpvg4UUf6yU3rsMb3JL32rUUP9Jjhp8k/3D + 8WLadEKRjahlw9kh+/iaz1AGZGiWM4CSpSOKJ24sfFr9djWm8XY0qLakY3q5 + fwz9xjKIwRhyF2bb1Z92fKNDFYO7Wa9lD7zbf7BraUAWpfL26lrpGkrZmqtM + K4wd2RkVZe66azE0lT93aOIPrXwXWIVZL0u+6YFAQx5D/98qbtbwGEtabTSq + TTuTikkV6nsq7eblsH3zjkT8olE3cY62VBPq1lKQNTgBWmgBbvebeRzJj8q/ + gpZNdjCCCe4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEPjAQ+687nD2HSP7 + xVzkMIWAggnAQ6dpcwNyBBKLNr4uYDAZerNqErnpRRnnJ62FpE2pR/MokRNO + M309vB5EpbIBa09cn1PGMyQ7uaaIXydtUwxfeS6307Lfo46swoPyWvHNC+1B + ngpiohRSJhiOUR8IUc3uwXNZ8YP8mo3bcjH9heq1WDMeAla8FiBtrdog2Rev + bnD2A3S6ustUVIhdR9TCzIXgG1ExgW7oFUn5Iuppl8K6Wv9LPiCs/hLr20fy + mg7QJaHHy49rm+L0X5Sf0Jg+gfHEQY5qg2NTqCb88fpYh7t4g8R5HY4QFame + gFrj11ZeavxKrLakz0k0uB8weLUWWOE2xHj4mdh87obW5J/xwekZkYqOWHmU + PLEyg9X441EMCBSYWFRz9HEK2Zv9Vg0qxKe++DNikVwDT9ntEYHnh43e7Iwp + YKwvCtlxxvQGY09acLuC0l4pifpJOsqOcAUjxf3WXoe1cjsjEcL+Z3mMmerh + 8JyXxJRp5Cu6TTMxcnQb/214/D8qYCKoPUYMddNC1G+XVosNY8QWbNp8nLUL + DZHsvI0tgk+CV/SPRl68dx7cE1bYioyS4EausMQub4eQykZl5My9qRR5htSl + C2zw+CP47EhsaA3zodbj6UgdYGBmhZNUOiW3oXWTKV0eSddkWcS/CmY271a9 + 6UIzE2TlRQ4w85GI8aD0W4DbsPyUvG0oay/lFYI6TzG1d6sL0rn/n1vvuUHB + n1OSyMdzcnUS0V7mt3gmGIKCYfEjG1auMaXlLag/NPPi5lvAkn8t8fY0uRn9 + 3kYpAPCPHFpqP8L/ZwIyHf/ePvRszzbuU23wkmcguIx3+UqGvwOyaMTGiy1K + 0ML0PUCMHPVrVDjkIHf9Tee/eFbRP9toQEofeesQtSJY6jW5zCCa/EEmmazy + jyo1hdsSCcTpizMylT4NDGpdfc73ccMwoGcuSdTtlAolBhn0qbBvEMo/GQMZ + JmvvOlE0BlDUGxbXE4XTrjIS2tJIL6Mrg0nQEJLB8u41i9fDJdPai3dwYlYZ + oMUT/QX417fPKl88t6NwkfFpW8mgStqeZR0ataza5lzHC61d5C1z+Zxzh/yk + oCgwmWFcz2kS8woi//0t3DtJB93bFbV0za9FUodcKrEcLowx3mN+g+URe5n0 + w7On4tjl4PGo5ko/15DDcRRlJlzQlUN28n0w3ENYaAgHiNKsksvXxqTL+mRo + kDhszsQyaatutqtjN7Tj9t5p+gIkjODhz5FmQop+ZirXwNElMX7N3WeFD8Tl + zLhopOuZ0loqaKWgTEY1hdYUINfkHTNyLIxwyYtJGPAU30q/c5qZ8opmil96 + tk6kpctBVAeNYVBfRNJYkGfNRrK7AiENuLaWGurGt05J00lSKOEQQXQuLqGy + mPC694aJ26aqjinuWZ21TCLh+e+Oib0sVYWObCjy/cBGtMQAlvTGEt/1zs66 + K+r1C0PJkWcDwDAF0mwnxDxFq1zcPYBG8xH90DrSPMoN0edLFMencGVrqMBI + agbUlkwePUdEc34zZ1khJbuBU/B0O8IRNY9rFQrU9ICCnKPVFvym85f0y8Ac + BphEJrS61CDa/L7techS1GTP8joSoZnT/OzzqXRXBe9Pgp9hubcckbGwi20k + sP4sCoChKe99wR4760z+q4JV91aVR/aKqAB+5R7aKor4ouQSaC203XzpDcOv + x/t6+l4cPetOvV5dtqPtpv1L+nPoLr9w3JS+ZGLOwmXAAx7Zr/DD8RGd6hM/ + OHfplbHg4XYbbDG51OTj6ajRwDoDgcLQ6VHz4/3HmcaNff2VcY4DFxKSpv+D + WSoepaN+KB+o1B4YRQ3XyuYhcAL7UlMJzA0CBmezZ2AMLTfGIaxFtwnqDMEc + kJ+m7BP3cyk/E6CTBFVrQajC7C8Gs5nNqI1sS79pMk07S2dOX/MRFSP0hw8i + ploMyzV6tCPAF/h9OO510W3iOqSN6nQe61BGlTgMgWKut4VWunpqZyANkIvT + SIeTR09cpSI5fhWfMdjv07TocakibiWFRZpvpOd0dkVA0FR5BurPxYoUB0od + FkWPGlgfTVCVuVLfVjEgig2j+YzoZM3Y/GkVu7IVkaxGI8+/uq6Hyordk051 + uDxbNDiuq0mXfL6KTiPJ/3TVPPLUnnFvEdWvgLIg4wnHpXxpkF44dFkKF4/y + d5Ykxpc6eThoV8aIVMUl5dod68LjclHL0Iv3l7+rTE6qPrTiShONvQbIu8lv + 5KXBK6GdjTFWz8c9Lr6zR/ABQ+XhQAlCqmwhfp+rEr1qReBEus5U4bL1ObuB + 1AA0r6AlmjCLH9F9BA3PcNVi5Zm988chcoCjl1GTjeMVcK501l9/KYcSjIzZ + bfaguVPCiSGG0/imDQ/QiBtDNGKHbdknJlTjBBaGWJkCFu/vpV6uzjfzMXRO + FXc/E31UdogZfprKRt1c1WHW8ozo8hV6/2D4X+tB1Jn4bELIgSZRhB7d29tm + jAxd8kAsCDsIK5NX0VXXzenZcut1L10lDVHcr+WOTT5lbGLgZCa508ExdtQk + /FsgqnzNOrqlCBx2gYU9UcrMxlOf7teEHxJmoFMqe7II2M/ye6eBYdy515GR + ywU0R8pRUuSs8njm7rYeuzG3rCd1j4RCasjbmLQLkuAVlxPjys+Hxe07jb8b + N4VyAQsUaFruuwkIUanANJdaOA72IJyPJCZf4HCScQEKG1EkU6oHNDelE0J/ + J9zTdzuUSwfv74pk/2PExloRH42glTAB/FOoIenzrtO7XvsV+HAaqoqJQ1Gr + 7lvjwU0B8GMijM20YQPOzhc9H34BWya5Y8BAaTbue+puAIjfLQaMPIcy/ilh + qIrVd1sNXCJtXJ2Smo5O3wGI3Qw29pQn98x20pJUCwXwLtdRWSocSL7qWlAh + pofd1vZ+5F5iW1XOm9//SIZ3lgHlEsWwnBL1v6mETXPA6UezJGSm2fhI14xx + EnFI3t1K0+JSkHq45nyxHGfiS1KcHvrblNnGOHWfxKDjdIKADAMI6yP3pWrQ + 2kmTSMSRcAN9TQxd2sFsLVe7zpFxBagp1SaXzKC/VpmWQu6Y6BNt6EjmZ7+r + UjpnfOY8H2efR2aNzMEdvtz/mY9pdzLSHIDNSndM+RqccpbcyJKTQXIdjHiZ + iHpfoZJ6g4VdkaXVRttaNfjuuwuAJuUaxoSdDOeswHIOIeNQ2N8e5OE0U4r7 + xvd/XDaPh2AE1061vN+InhW9lC2QrIxSrHzQoz0uVVq23D1aMyin8UHTTo1e + h8zTkvycy4d/FiozapuXBuM49p8DgcX0kESTVnL4A99qzFr7PU4CWDQssgkU + WGs3X/Ut0GKaJXFMwajblcJu80p7HRmaXJWIBmwe] certificate: | -----BEGIN CERTIFICATE----- - MIIGUzCCBDugAwIBAgIDAvEzMA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB + MIIGUzCCBDugAwIBAgIDAvqLMA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV - BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjEwNzE2MjIyMTMwWhcNMjIwNzE2 - MjIyMTMwWjCBrzELMAkGA1UEBhMCQVUxDDAKBgNVBAgTA05TVzEPMA0GA1UEBxMG + BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjIwNjE4MTAyMTIwWhcNMjMwNjE4 + MTAyMTIwWjCBrzELMAkGA1UEBhMCQVUxDDAKBgNVBAgTA05TVzEPMA0GA1UEBxMG U3lkbmV5MRQwEgYDVQQKEwtDQWNlcnQgSW5jLjEcMBoGA1UECxMTSW5mcmFzdHJ1 Y3R1cmUgVGVhbTEjMCEGA1UEAxMaQ0FjZXJ0IGV4dGVybmFsIG1vbml0b3Jpbmcx KDAmBgkqhkiG9w0BCQEWGW1vbml0b3ItY2xpZW50QGNhY2VydC5vcmcwggGiMA0G @@ -404,17 +433,17 @@ profiles::icinga2_certificates::certificates: IgYIKwYBBQUHMAGGFmh0dHA6Ly9vY3NwLmNhY2VydC5vcmcwOAYDVR0fBDEwLzAt oCugKYYnaHR0cDovL2NybC5jYWNlcnQub3JnL2NsYXNzMy1yZXZva2UuY3JsMCQG A1UdEQQdMBuBGW1vbml0b3ItY2xpZW50QGNhY2VydC5vcmcwDQYJKoZIhvcNAQEN - BQADggIBAHFHlSHLdUIjuFfW2UxuCO3cBb70iU64PGeE1fTOQ1A+z3BO27bzuhH+ - jL9k0p1eTcrfcsJm9Q927WIFKaXHLAsC2E3hOtaaxPSPWzI0Aquv+BSoDd9GrQcH - VjfAb0mPhgN9VqgdxnAFweNl6F231aq6ryxQIe4G/DDvPMQiAn3x5IUzIHgfO+L4 - xmwqu8V/biKijYclqAnIiVXYJqLMi8OPJ5o98LZudzDdhDd/6U3n8NE7qNUns1Rj - 2GoDNFtJecGtGTLBShQTxIwfIBNOfHQjlZo0HXOoCzsMGUsT8sAKGJTprsrRdQ8g - mj5663nnZveb0kTZdkRYZBVKwRkznAZj9ITZLj+eLXQb3Wi5BR4Rev7KdWRcE0P4 - Qdeeb9MvnM3CR5MWG9uEIZNz8TYYAxcNvjYOcEDStvqNrJ164iTierItL8Mmpnii - 0hKDfCt08IS5S6uOHGRz+qYudB8l5uTCXdhCFqaZs4CMGUM9sylfPnMB91M5oKxB - 7QNsTmv5qc2L62YolNpMRmQjwy3RNnLIOlcg6kkLRNTrACStYGsLVDntnLRLMrZf - L4269s/c7qifundMMNipycxPtxtYYLZ6wl2WTVEsE175wtEPJwirK9p7NZWP0Zi+ - ZjFKUtPcj79ZDzJU4hI61SZFkTKXnOmBDj/wb3xntXueXsw9H9un + BQADggIBAJwRD14Jv/b0tU28CUBwp35wiez99dIbNRmcKoZ7Fghf50Rg6y+eOVo4 + og8Tmoez6lLEzQJ1n/4WuMgnbOhhMRguCESKY90vORFC/xdc4lcOQx5rdvvj0RSQ + WBC2IE5eeTA3mAiagFdrYK0U/uPd7qlz6XMrPZqB68/7K0dov+afIXeNAwpKNd13 + QCo56aygf3CiV1OiZ3IUH8YRax93kntV9Hmytx2iYDOqcM2OZB0P9GknHSWi5NGM + pCAFdZoLc1O+tn8Mh2AXSjerDVrnKkl0bfNNWyMnosdSEnO6awGlVsL+fDvqVL1x + KG9WmHJggWO/0xIrjAUBxPYl+4pJcl6O82PBRwpnVLQ9vY4Qoez7suaXmHt2cmDu + DrCtg7/RcgOi2bWY/GYRulSWNFKj3OfV5VDTVVPKqYVzOzHPsKtu1vEuKdxJKSRK + b/+KmWGnspEJXCZsoDiK3UcP/2IEX30PCpY/r/otCjXcZEahxg2Pkphrg7k5gJWB + C0fSPyoj3VYhJvNCPmCwLk8MDQK8XjJdi+K+5yGBb6wLeEjIwJXZZ+1Srvf4X/YK + lxP5NDdVSj02lC+/ydBg5yZF2IDsKkyb5FcH/Ng8reDsZDOj7CzUrvQgjpAqGrWp + jbv7XaRehD3SWuYfyc3twGGh2TrWMz24UIyKrco3CA+w3U06/Gip -----END CERTIFICATE----- profiles::x509cert_common::certificates: 'monitor.cacert.org': diff --git a/hieradata/nodes/motion.yaml b/hieradata/nodes/motion.yaml index c719313..d774543 100644 --- a/hieradata/nodes/motion.yaml +++ b/hieradata/nodes/motion.yaml @@ -4,38 +4,38 @@ classes: profiles::base::admins: - jandd profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAS9KablO0ZUn6gFXJYLMgWRb9gGWoR5SsVvow - 2bFqpyHFUsgtlb5hm+E6XvZxrD56FI9twxSSuTdHhW+hUf1WQr34Ik/M1kFJ - XYFKUn4WDoejCwxGYbqbptyJhPMsJh7Qgx0d7SQhrordLoI7SQ8kEbTT5yo+ - oEBPYXoTunQrkB7pSgfThRwLZPZ+xsbDPimp66imBWgXoSFBI2OO9dLVshGJ - +M//INVZG6dOF9tPjxeKz5tTiKdZ7Qkh8/lzQrSA6PHW3MDCtxwjejCQlZjp - 8S5bFy/Ajp7amCL5b7k/bXGX6UPHMqWgLKu0+vH5IPPe4i8Y5sU6nzOhY1mH - pINd2zBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBFDA0rqy9ELGvgfhPS - 826ogDClIoHwcGV6JFe+nACOgye8JBdCkvUJmlEdPUawmLrjto1ZtVHHsCks - XJx1XYBR3vY=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAS9KablO0ZUn6gFXJYLMgWRb9gGWoR5SsVvow + 2bFqpyHFUsgtlb5hm+E6XvZxrD56FI9twxSSuTdHhW+hUf1WQr34Ik/M1kFJ + XYFKUn4WDoejCwxGYbqbptyJhPMsJh7Qgx0d7SQhrordLoI7SQ8kEbTT5yo+ + oEBPYXoTunQrkB7pSgfThRwLZPZ+xsbDPimp66imBWgXoSFBI2OO9dLVshGJ + +M//INVZG6dOF9tPjxeKz5tTiKdZ7Qkh8/lzQrSA6PHW3MDCtxwjejCQlZjp + 8S5bFy/Ajp7amCL5b7k/bXGX6UPHMqWgLKu0+vH5IPPe4i8Y5sU6nzOhY1mH + pINd2zBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBFDA0rqy9ELGvgfhPS + 826ogDClIoHwcGV6JFe+nACOgye8JBdCkvUJmlEdPUawmLrjto1ZtVHHsCks + XJx1XYBR3vY=] profiles::cacert_boardvoting::cookie_secret: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAH+GZS+H+iQKPzWUCsOXE/Lc8V5qIYleMqHZH - 93LcnFX0m9gY6CEEDkSzlcnrtyPUsMGubmb6lIJ1zvFLxhf1HNCkJzzDxj6G - X6cbP32QDDO7q/Gs961nuVCW2t7JysiZ+WHXTOzb5u3kHDXkdugOpxkZC19k - Z/K7u1RFn2kxiLziWWyla6t8oCjyIfR43XeckSpHskRKS29baVKLRSz9qlFX - saQy/KpnxNpPmIASpYOmNO8NcU7Fzfo1QfnNkjFpwxh4SbVI4CvhVWX1WdU6 - koP5e3qETucQa4eTgCS8ZwNN8IWkPMgKr+bWjYSdAI6M9pjZ2hkOfxstQ0tu - HRjC/zBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBkBZdsVnxBj8ejMMe+ - lY7ygDA6eB64BpOOfiTQ2gdnHagIv9JeFwW9wGaD6wc+HZKfu5UKEFlkpkMg - M9wxxAhBUlc=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAH+GZS+H+iQKPzWUCsOXE/Lc8V5qIYleMqHZH + 93LcnFX0m9gY6CEEDkSzlcnrtyPUsMGubmb6lIJ1zvFLxhf1HNCkJzzDxj6G + X6cbP32QDDO7q/Gs961nuVCW2t7JysiZ+WHXTOzb5u3kHDXkdugOpxkZC19k + Z/K7u1RFn2kxiLziWWyla6t8oCjyIfR43XeckSpHskRKS29baVKLRSz9qlFX + saQy/KpnxNpPmIASpYOmNO8NcU7Fzfo1QfnNkjFpwxh4SbVI4CvhVWX1WdU6 + koP5e3qETucQa4eTgCS8ZwNN8IWkPMgKr+bWjYSdAI6M9pjZ2hkOfxstQ0tu + HRjC/zBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBkBZdsVnxBj8ejMMe+ + lY7ygDA6eB64BpOOfiTQ2gdnHagIv9JeFwW9wGaD6wc+HZKfu5UKEFlkpkMg + M9wxxAhBUlc=] profiles::cacert_boardvoting::csrf_key: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAIrQdj2r/LUGR929i202pTLTvG6vplBCOkZ3f - /29l5wR1aajD0Kz8Jfs14PAO0a5IEksQwf875uJPKjOCWZS+WlJgrpqGHXt1 - OU89MN0ZmhsNtejQq355WmG2sY5z7PO/xfUcEAYuOcZO5a89Mitf18v+dRqy - UEpXHsvlUI/5wCz2KNqL7BCkd/50Z+TE4OGPM4bZzvio48tUZhBMLHDUU3hr - PQsOhih8y1qoDdFUvypp9SIqF5VWX+I9v1qhcnYpPGc2nQLEpSs9Wp3xMJhm - owKy6zxmO2/0GUVMX6NQaIk6XLthHVgW7au3wPC5WV0pVxBgXQxDQFuWSN7W - BUkT9DBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCYfwhgtuCfhI8cy/Lr - /jX1gDDj1Mft02q1naNtqZy5rVQSTdbsiaN2LbufDSFaSyOKWkRcGEBXvtzx - g9VtuODC3gU=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAIrQdj2r/LUGR929i202pTLTvG6vplBCOkZ3f + /29l5wR1aajD0Kz8Jfs14PAO0a5IEksQwf875uJPKjOCWZS+WlJgrpqGHXt1 + OU89MN0ZmhsNtejQq355WmG2sY5z7PO/xfUcEAYuOcZO5a89Mitf18v+dRqy + UEpXHsvlUI/5wCz2KNqL7BCkd/50Z+TE4OGPM4bZzvio48tUZhBMLHDUU3hr + PQsOhih8y1qoDdFUvypp9SIqF5VWX+I9v1qhcnYpPGc2nQLEpSs9Wp3xMJhm + owKy6zxmO2/0GUVMX6NQaIk6XLthHVgW7au3wPC5WV0pVxBgXQxDQFuWSN7W + BUkT9DBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCYfwhgtuCfhI8cy/Lr + /jX1gDDj1Mft02q1naNtqZy5rVQSTdbsiaN2LbufDSFaSyOKWkRcGEBXvtzx + g9VtuODC3gU=] profiles::x509cert_common::certificates: 'motion.cacert.org': certificate: | diff --git a/hieradata/nodes/nextcloud.yaml b/hieradata/nodes/nextcloud.yaml index 10c5698..8241399 100644 --- a/hieradata/nodes/nextcloud.yaml +++ b/hieradata/nodes/nextcloud.yaml @@ -5,13 +5,13 @@ profiles::base::admins: - jandd - sat profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAf/+tramMebPzMWd/i/zMwITL4i0ZYjw56aoo - Dy0XUs0W70Im3urRUQuZuwnTofhlgommsgaYdcpZbyNT0SZezMQN8IE9davi - Yje6meB24OnsEHrdG72ZaKil/jZwSrI9IZiQcI2iQ9jQLE2of64ZJSQAQV/o - WuE6hqHRrdNeX/mZfxNP5POqZCtKItLOP7D4rtYIOJXg1cH1auR2QG/ScSgI - RGbDb1hxvYtzBC9mrpVMVKJANtqoWVCJtBCzy1s54U8bPnO40J8jBL6zhzQG - BtFGXFZmI9824b2R+4v4MG/1Bwom+QPD1a3W+h+g4QIJg6QI0j9+9Wwe28fN - ZKBdCjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCyGoJBFH0OR6RkKgsM - grOdgDD+phhOfhpxDR186OX0h79GOz5cVdVFBoV/OiKCUjYuKfjFzFuCGw1x - UkfGGUOJXho=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAf/+tramMebPzMWd/i/zMwITL4i0ZYjw56aoo + Dy0XUs0W70Im3urRUQuZuwnTofhlgommsgaYdcpZbyNT0SZezMQN8IE9davi + Yje6meB24OnsEHrdG72ZaKil/jZwSrI9IZiQcI2iQ9jQLE2of64ZJSQAQV/o + WuE6hqHRrdNeX/mZfxNP5POqZCtKItLOP7D4rtYIOJXg1cH1auR2QG/ScSgI + RGbDb1hxvYtzBC9mrpVMVKJANtqoWVCJtBCzy1s54U8bPnO40J8jBL6zhzQG + BtFGXFZmI9824b2R+4v4MG/1Bwom+QPD1a3W+h+g4QIJg6QI0j9+9Wwe28fN + ZKBdCjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCyGoJBFH0OR6RkKgsM + grOdgDD+phhOfhpxDR186OX0h79GOz5cVdVFBoV/OiKCUjYuKfjFzFuCGw1x + UkfGGUOJXho=] diff --git a/hieradata/nodes/pgsql.yaml b/hieradata/nodes/pgsql.yaml index c0eba3c..cfa6ced 100644 --- a/hieradata/nodes/pgsql.yaml +++ b/hieradata/nodes/pgsql.yaml @@ -4,13 +4,13 @@ classes: profiles::base::admins: - jandd profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAXb21L9FKfx91iFN/59W2NWuqbDHNZpx8pvGx - 55uP3PdxPy1dWiv11mxkPt0hQNNAGdPbCRrWWjyIp0MccEWDgKEtMGz6yI0q - InvLHpOihv3siGbIbOgWH5wNkQ+ab8syeVG/GKLcU9kJTHOLP47wyqYGSw2m - r4bluOe3WqMbbFmvqrT3lxuyNNPaXR7jrcvyIGLH24no6VNooBoa6+yoZY6f - VPKJeHfvflikXBn3UuGWPTTaoqoj180ZNfm0nI+p1kRHU+i1MwjQLzNihODV - PA3WIC6Dciu3JMhm4IsgeN/sUEbM4iVkr/8U88aqulgYnPqhIpKKGVtn2zXJ - HVJFyTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDBon/BhIcdE1/J67sF - euz8gDA6h1hNPUkDjIxqD1njBbKSkD1HWtOndHeVQBrYA/8xv10laBcQoprd - pryxipVIgkc=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAXb21L9FKfx91iFN/59W2NWuqbDHNZpx8pvGx + 55uP3PdxPy1dWiv11mxkPt0hQNNAGdPbCRrWWjyIp0MccEWDgKEtMGz6yI0q + InvLHpOihv3siGbIbOgWH5wNkQ+ab8syeVG/GKLcU9kJTHOLP47wyqYGSw2m + r4bluOe3WqMbbFmvqrT3lxuyNNPaXR7jrcvyIGLH24no6VNooBoa6+yoZY6f + VPKJeHfvflikXBn3UuGWPTTaoqoj180ZNfm0nI+p1kRHU+i1MwjQLzNihODV + PA3WIC6Dciu3JMhm4IsgeN/sUEbM4iVkr/8U88aqulgYnPqhIpKKGVtn2zXJ + HVJFyTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDBon/BhIcdE1/J67sF + euz8gDA6h1hNPUkDjIxqD1njBbKSkD1HWtOndHeVQBrYA/8xv10laBcQoprd + pryxipVIgkc=] diff --git a/hieradata/nodes/proxyin.yaml b/hieradata/nodes/proxyin.yaml index cd93e55..dc8bdf3 100644 --- a/hieradata/nodes/proxyin.yaml +++ b/hieradata/nodes/proxyin.yaml @@ -66,13 +66,13 @@ profiles::sniproxy::forwarded: - name: www.test3.cacert.org ip: "10.0.0.149" profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAVh+d4e8x8Tub+RMVEeyllfUZz2VGaqIL0mW7 - ut0O6rBk61BKV08M6FlxZs8n/fE8WrYi+xGHKYaHdLpOZZ4BTxCWubhuRN5Z - RG7hQ25+dWuzKCu3OmICzDbLRYeIVCe3b+H79OgTKRMTcq3bdZz5e8uC24QB - D2ZJaLAZnqptmpuUNTUk+fObr7hbQRMcNCJh9F9gxiuzbHMbK81GTZiPRIja - zEgkOa1/YPW+z/wCN8/eq28j9EHmWdFa1VH65J90EZHDCOP+6rio+cyNMO62 - Sy68oyvneM/jpCyMP6Gy6yfJV010gsgjuqXVpgaCY/vG6Hj8QgXak47cZwIs - j6XoNDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCTWSRL9jrFqf3OQfAJ - ovhwgDBsBmXU7Yn2QlrQEQRNcDMbVxvawLN5AO+hYWPXyCUX8+9vyiWXwBCY - noKDG2x54fE=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAVh+d4e8x8Tub+RMVEeyllfUZz2VGaqIL0mW7 + ut0O6rBk61BKV08M6FlxZs8n/fE8WrYi+xGHKYaHdLpOZZ4BTxCWubhuRN5Z + RG7hQ25+dWuzKCu3OmICzDbLRYeIVCe3b+H79OgTKRMTcq3bdZz5e8uC24QB + D2ZJaLAZnqptmpuUNTUk+fObr7hbQRMcNCJh9F9gxiuzbHMbK81GTZiPRIja + zEgkOa1/YPW+z/wCN8/eq28j9EHmWdFa1VH65J90EZHDCOP+6rio+cyNMO62 + Sy68oyvneM/jpCyMP6Gy6yfJV010gsgjuqXVpgaCY/vG6Hj8QgXak47cZwIs + j6XoNDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCTWSRL9jrFqf3OQfAJ + ovhwgDBsBmXU7Yn2QlrQEQRNcDMbVxvawLN5AO+hYWPXyCUX8+9vyiWXwBCY + noKDG2x54fE=] diff --git a/hieradata/nodes/puppet.yaml b/hieradata/nodes/puppet.yaml index e8b6047..983ba9a 100644 --- a/hieradata/nodes/puppet.yaml +++ b/hieradata/nodes/puppet.yaml @@ -10,26 +10,26 @@ profiles::puppet_server::git_pull_directories: master: /etc/puppetlabs/code/environments/production training: /etc/puppetlabs/code/environments/training profiles::puppet_server::git_pull_ssh_passphrase: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAhbUQYK6aL9A43CJJoXTpgpEvKny739PCf4pQ - pn4hkzJPV+j8+9AOIMPF9Jl4ZWJP1nClEia7/or5/ACeDzs1mIDejf7OXW2o - nBV2QQs34VgFTNyD+szaouftcPJK25/2/EwGzn7XCnefd7xiEd1xxtogDHTp - VDxcZMuA1/OJ7PYSkYkzRPzwHKUuqqOl2uUPZquOpQgJEYC7lkDePNd8zFvp - XmXjaL27EhXyn3tvAjytHOhSU24F0xspK0+Xuv46AIQLztMFO5MItefUQrXF - xSUdHR1h558pJf45YRxT9nmiDLdFUt8hLl0aUep7+kkG+7pSytQJT8GTSTFb - 0MlwuDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDX/ycL+PdDfsZ4QGIz - 72sBgDCNDoJmkzzjSfLIvN/Q2D0p2XBtKWrc7NkmVzZrzVZ6cLJCBornuJ72 - fOJnmPqpFng=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAhbUQYK6aL9A43CJJoXTpgpEvKny739PCf4pQ + pn4hkzJPV+j8+9AOIMPF9Jl4ZWJP1nClEia7/or5/ACeDzs1mIDejf7OXW2o + nBV2QQs34VgFTNyD+szaouftcPJK25/2/EwGzn7XCnefd7xiEd1xxtogDHTp + VDxcZMuA1/OJ7PYSkYkzRPzwHKUuqqOl2uUPZquOpQgJEYC7lkDePNd8zFvp + XmXjaL27EhXyn3tvAjytHOhSU24F0xspK0+Xuv46AIQLztMFO5MItefUQrXF + xSUdHR1h558pJf45YRxT9nmiDLdFUt8hLl0aUep7+kkG+7pSytQJT8GTSTFb + 0MlwuDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDX/ycL+PdDfsZ4QGIz + 72sBgDCNDoJmkzzjSfLIvN/Q2D0p2XBtKWrc7NkmVzZrzVZ6cLJCBornuJ72 + fOJnmPqpFng=] profiles::puppet_server::git_pull_token: > - ENC[PKCS7,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] + ENC[PKCS7,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] profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAdehEizEK2eAr85FD4XwS8dzDiIqKV2vanCjn - yJtnyX3IZ66tJkqtUUUMW5cWDY6I5eMmmmMOdqfXi+ZJ43aXmGNw9T6p05P6 - mVIUG4opuW6Udug1eo9t0QTgtFKquuTJD+bqmvEtXvQ9JR2mKOH24OPi6kp9 - jXbj6Gf9TNbGo9LXFEMuf4PaugOiIyW3rqBqpCX6MI3Fbt5BCkPFgRSl+yxG - 2fAdNzOz5aDVLptT5fGHCvUPUpTuVGGAToqs4JOVGob1EFfwGniWqYoyzxWq - 1g8bJ6OJ9w3oXYDm24lqmQB7U7enzrHEnP4wRRiuzXZasoeEjQumLdOmVgZd - sBBGGjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCixanHeFcVKKQc02XF - oewVgDB5dfRWbXLWJUcemnGSTPZWFh7Tb7zKl4X9ihJgMsM9NDb2syw4rAfU - DFxe1xKUOAo=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAdehEizEK2eAr85FD4XwS8dzDiIqKV2vanCjn + yJtnyX3IZ66tJkqtUUUMW5cWDY6I5eMmmmMOdqfXi+ZJ43aXmGNw9T6p05P6 + mVIUG4opuW6Udug1eo9t0QTgtFKquuTJD+bqmvEtXvQ9JR2mKOH24OPi6kp9 + jXbj6Gf9TNbGo9LXFEMuf4PaugOiIyW3rqBqpCX6MI3Fbt5BCkPFgRSl+yxG + 2fAdNzOz5aDVLptT5fGHCvUPUpTuVGGAToqs4JOVGob1EFfwGniWqYoyzxWq + 1g8bJ6OJ9w3oXYDm24lqmQB7U7enzrHEnP4wRRiuzXZasoeEjQumLdOmVgZd + sBBGGjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCixanHeFcVKKQc02XF + oewVgDB5dfRWbXLWJUcemnGSTPZWFh7Tb7zKl4X9ihJgMsM9NDb2syw4rAfU + DFxe1xKUOAo=] diff --git a/hieradata/nodes/svn.yaml b/hieradata/nodes/svn.yaml index cf1eae2..e644a10 100644 --- a/hieradata/nodes/svn.yaml +++ b/hieradata/nodes/svn.yaml @@ -4,20 +4,35 @@ classes: profiles::base::admins: - jandd - law -profiles::base::crl_job_enable: true -profiles::base::crl_job_services: - - apache2 +profiles::base::crl_job: + enable: true + hostname: svn.infra.cacert.org + services: + - apache2 + check_url: https://monitor.infra.cacert.org:5665/v1/actions/process-check-result + api_user: passive-check-submit + api_password: > + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBAD + AFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAM31x48NC4B2agnpHt0hEzxLLJm + ADhYW0Lj3JuBNj+wpK8O4GkAf9L2OlOiNAIgiX5epzbUtvtB8ayQQ2+4yuNn + jkgfSDvPaGU+f0mFv0CjynUEDrf2rQzevFyIfnpzN9ZSnGw2/59tpS0LyJ6M + Yv3NmB0mdXzPWMrgCMt+G9i/l1s9yVjOw7p7V9prpUqD7hGKG0Fg7EeM7LFJ + 1ovxPDDar4ZlhooM6+W3Ov5n0y/3bYaPWv+VhcVmSQvWgJw6ZqP5jhpYTqSC + dr8urkIi1wfSSPeiNXhK+SQS/KFZOl9dmhj6QuereRyXX1H7X7fphVltADBq + S3mCbxlgEEPPgTbzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDlvyMRCV + MAziedXFk/L9XcgDDpzkgF8ybQ+aX31v25dTxzAPEnjuvaGY5njoUEbcpkOo + f0mf2So5a6xrylLZCcxrw=] profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAec3jnFxK1YLgov72NUbFza8tlZSAzXnWG/rD - QEyCaVt9mo9rT1USxkv0MRPmdKjiPx6c+3SXZu4ah1Mgln9TgwOSLy4jKuWX - NmPo8quPag82wX/WMu4ri1npaLc2Isg8qMCe1N94uYeuN9gGhBclee9iRxpz - wFhEs7JACkTW1ECDD5VMX/0tZMEvebjbrnEIOy3yqI/JwHSwqERl+y8LzrhH - w/tn7oeidTBFFe5gnbRaco5LVLFcbeBNe7qmQUtnMFcZ9JAgOxBlCoa1EsLB - LhJI6+2BqEKe8rH1qbbb2t6OMgmVzc401v48FX5+8zyK0J5QBCTul8HmCQDe - 5hUJmTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCYhjTXRy19pOxdmsBM - o9/cgDCuafR60F9NCrba/VThRNOJoJrfk3vwMsBVC+jJcxSqyq6jWidrqvlS - 3bfPMwDXEkk=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAec3jnFxK1YLgov72NUbFza8tlZSAzXnWG/rD + QEyCaVt9mo9rT1USxkv0MRPmdKjiPx6c+3SXZu4ah1Mgln9TgwOSLy4jKuWX + NmPo8quPag82wX/WMu4ri1npaLc2Isg8qMCe1N94uYeuN9gGhBclee9iRxpz + wFhEs7JACkTW1ECDD5VMX/0tZMEvebjbrnEIOy3yqI/JwHSwqERl+y8LzrhH + w/tn7oeidTBFFe5gnbRaco5LVLFcbeBNe7qmQUtnMFcZ9JAgOxBlCoa1EsLB + LhJI6+2BqEKe8rH1qbbb2t6OMgmVzc401v48FX5+8zyK0J5QBCTul8HmCQDe + 5hUJmTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCYhjTXRy19pOxdmsBM + o9/cgDCuafR60F9NCrba/VThRNOJoJrfk3vwMsBVC+jJcxSqyq6jWidrqvlS + 3bfPMwDXEkk=] profiles::x509cert_common::certificates: 'svn.cacert.org': certificate: | diff --git a/hieradata/nodes/test3.yaml b/hieradata/nodes/test3.yaml index 40f9bb6..d553fa8 100644 --- a/hieradata/nodes/test3.yaml +++ b/hieradata/nodes/test3.yaml @@ -12,13 +12,13 @@ profiles::base::admins: - wytze profiles::base::crl_job_enable: false profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAMKjN59WDnskWcAtQqEliDyQZCqXlz4vLZ4p0 - nDx3yRY0XLObpodx1h9Em3XhETsm85Quh0MujnPrttb6XMh+BKNurc5kLLs6 - QWVNzRyNqm9d+1DLsKjWOnYzwvu1t35v5ZKmsnsmF/3Ek5qmWGlkoiaNajKJ - 29z1WldM/ZBpXAOv98iPE7iF8hrqpvUOyaJ5mo5aAlLHDT1XW0GQiBPjrMYj - sR+c7K/3HiuqA4sMsjAhQANI7CFNyvP3sgLE+sp+0PWzCXN6+4jDdUCTI4mp - 4RL43bMkSBKgLsMxErQW6yenEYpx/gAGWTN16TaC2L3eOlmDs6yMlabLbSg3 - KNPHHDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBfXQRynNrVC5Fg/jv9 - oA/IgDD97FWwTY4zMQXU8krGLmlxJYiL6mCpdSzhfEtWYxj34Ch1Ce0J/HKa - CW2y+asnB/I=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAMKjN59WDnskWcAtQqEliDyQZCqXlz4vLZ4p0 + nDx3yRY0XLObpodx1h9Em3XhETsm85Quh0MujnPrttb6XMh+BKNurc5kLLs6 + QWVNzRyNqm9d+1DLsKjWOnYzwvu1t35v5ZKmsnsmF/3Ek5qmWGlkoiaNajKJ + 29z1WldM/ZBpXAOv98iPE7iF8hrqpvUOyaJ5mo5aAlLHDT1XW0GQiBPjrMYj + sR+c7K/3HiuqA4sMsjAhQANI7CFNyvP3sgLE+sp+0PWzCXN6+4jDdUCTI4mp + 4RL43bMkSBKgLsMxErQW6yenEYpx/gAGWTN16TaC2L3eOlmDs6yMlabLbSg3 + KNPHHDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBfXQRynNrVC5Fg/jv9 + oA/IgDD97FWwTY4zMQXU8krGLmlxJYiL6mCpdSzhfEtWYxj34Ch1Ce0J/HKa + CW2y+asnB/I=] diff --git a/hieradata/nodes/translations.yaml b/hieradata/nodes/translations.yaml index a4c91c5..10c21ee 100644 --- a/hieradata/nodes/translations.yaml +++ b/hieradata/nodes/translations.yaml @@ -5,16 +5,16 @@ profiles::base::admins: - jandd - law profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAfQt55rAfM/F5sHxwF2piA0Uz+VK3wfxDfGrq - B86bLEMxo0L6JCKAJZCbB3g030KCDwHkijGTLdWhFXmmPrtxWxLP0/gSQr2c - zdINvFYImjree241KUkXIJXxn6pdjGLSbikgJgs9rwIvgGJLxjQZQ7SMhQg2 - Qrwg5ST8tkEqyADYeBMRrvRs53XnD3fs2RKW0hQcfejV5UTVyruVaEtCBsla - eheWrISyIKWpTF3URj87C7VX1oO4S8eLlI79uD+hBJ1FMQydxEdg44KCfn7C - 0SPnekHB1DsccEaVMNrabA0NuUaIuO3OacgUGIGY6wIeAQ8XU4fp/80TWg5H - NWPIWzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAIIDfJz8DZ+wTiUrSQ - f5zZgDBxARneBbiwCCFM/g2AmmEVOHwFjUATjdCXpURzhVEL+mrFjtakN16r - 6tihfcnNiqE=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAfQt55rAfM/F5sHxwF2piA0Uz+VK3wfxDfGrq + B86bLEMxo0L6JCKAJZCbB3g030KCDwHkijGTLdWhFXmmPrtxWxLP0/gSQr2c + zdINvFYImjree241KUkXIJXxn6pdjGLSbikgJgs9rwIvgGJLxjQZQ7SMhQg2 + Qrwg5ST8tkEqyADYeBMRrvRs53XnD3fs2RKW0hQcfejV5UTVyruVaEtCBsla + eheWrISyIKWpTF3URj87C7VX1oO4S8eLlI79uD+hBJ1FMQydxEdg44KCfn7C + 0SPnekHB1DsccEaVMNrabA0NuUaIuO3OacgUGIGY6wIeAQ8XU4fp/80TWg5H + NWPIWzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAIIDfJz8DZ+wTiUrSQ + f5zZgDBxARneBbiwCCFM/g2AmmEVOHwFjUATjdCXpURzhVEL+mrFjtakN16r + 6tihfcnNiqE=] profiles::x509cert_common::certificates: 'translations.cacert.org': certificate: | diff --git a/hieradata/nodes/web.yaml b/hieradata/nodes/web.yaml index 8e79389..0018a68 100644 --- a/hieradata/nodes/web.yaml +++ b/hieradata/nodes/web.yaml @@ -5,16 +5,16 @@ profiles::base::admins: - jandd - law profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAMqkR/DWeLFAWqlr3jgDHss1geIoCQ3uyvLYN - 8ZIGs2H9GBOt5hLtauxpG5U8oWwg/G4blCEFHAHt7XUrGHW57hLc18uA5pz0 - rxRoKvrHVWBevsjvGK4lvmI3lfhY4EShqFT80O9u0Pn2XxyM0vmlDhpHuNb7 - dqCp2d9hHnvM+/5rqIlYqMPfWQbmO1bYnE+x1pbHiZg+qzeT0klYJUbL+fUz - ZiDuJi0yDbqsX1pAB4NdQVD864IjvENg7TNxBY2Cqoa3XjnayBANOT5HdXKw - yjf8+UvfpbXEc5QohyBMQDfzxZ8MgAbjRWd4+AmIIy+tbrdqQMMyhZ9ILAlM - HJyrfzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDB9xfyP2Mjapd/vzRW - ek3UgDBo03zKwbxJ6uooqQ/68zHDKAj0gh2Kpe8tGdbnKm1dOHIpru/5zjob - 2gNuQB6szY0=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAMqkR/DWeLFAWqlr3jgDHss1geIoCQ3uyvLYN + 8ZIGs2H9GBOt5hLtauxpG5U8oWwg/G4blCEFHAHt7XUrGHW57hLc18uA5pz0 + rxRoKvrHVWBevsjvGK4lvmI3lfhY4EShqFT80O9u0Pn2XxyM0vmlDhpHuNb7 + dqCp2d9hHnvM+/5rqIlYqMPfWQbmO1bYnE+x1pbHiZg+qzeT0klYJUbL+fUz + ZiDuJi0yDbqsX1pAB4NdQVD864IjvENg7TNxBY2Cqoa3XjnayBANOT5HdXKw + yjf8+UvfpbXEc5QohyBMQDfzxZ8MgAbjRWd4+AmIIy+tbrdqQMMyhZ9ILAlM + HJyrfzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDB9xfyP2Mjapd/vzRW + ek3UgDBo03zKwbxJ6uooqQ/68zHDKAj0gh2Kpe8tGdbnKm1dOHIpru/5zjob + 2gNuQB6szY0=] profiles::web_proxy::ssl_certificates: 'web.cacert.org': key: > @@ -673,8 +673,7 @@ profiles::web_proxy::apache_vhosts: ssl_chain: "/usr/local/share/ca-certificates/cacert_class3_2021.crt" ssl_key: "/etc/ssl/private/codedocs.cacert.org.key" proxy_pass: - - - path: / + - path: / url: http://10.0.0.116:80/ proxy_preserve_host: true 'funding.cacert.org redirect-http': @@ -704,8 +703,7 @@ profiles::web_proxy::apache_vhosts: ssl_chain: "/usr/local/share/ca-certificates/cacert_class3_2021.crt" ssl_key: "/etc/ssl/private/funding.cacert.org.key" proxy_pass: - - - path: / + - path: / url: http://10.0.0.116:80/ proxy_preserve_host: true 'infradocs.cacert.org redirect-http': @@ -732,11 +730,10 @@ profiles::web_proxy::apache_vhosts: manage_docroot: false ssl: true ssl_cert: "/etc/ssl/certs/infradocs.cacert.org.crt" - ssl_chain: "/usr/share/ca-certificates/CAcert/class3_X0E.crt" + ssl_chain: "/usr/local/share/ca-certificates/cacert_class3_2021.crt" ssl_key: "/etc/ssl/private/infradocs.cacert.org.key" proxy_pass: - - - path: / + - path: / url: http://10.0.0.116:80/ proxy_preserve_host: true 'jenkins.cacert.org redirect-http': @@ -763,11 +760,10 @@ profiles::web_proxy::apache_vhosts: manage_docroot: false ssl: true ssl_cert: "/etc/ssl/certs/jenkins.cacert.org.crt" - ssl_chain: "/usr/share/ca-certificates/CAcert/class3_X0E.crt" + ssl_chain: "/usr/local/share/ca-certificates/cacert_class3_2021.crt" ssl_key: "/etc/ssl/private/jenkins.cacert.org.key" proxy_pass: - - - path: / + - path: / url: http://10.0.0.115:8080/ keywords: ['nocanon'] proxy_preserve_host: true diff --git a/hieradata/nodes/webstatic.yaml b/hieradata/nodes/webstatic.yaml index 497cab4..27223ba 100644 --- a/hieradata/nodes/webstatic.yaml +++ b/hieradata/nodes/webstatic.yaml @@ -6,72 +6,72 @@ profiles::base::admins: - law profiles::debarchive::notification_email_address: jandd@cacert.org profiles::debarchive::release_signing_key: > - ENC[PKCS7,MIIIzQYJKoZIhvcNAQcDoIIIvjCCCLoCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAtJiS4GluyFbbkmxFKmH+2CWZRD1wotHn8HAc - 7wXckaUSIaUvHY9aor6lxFgjD8vnE5ROmiBTtCsJ0Rmx0oJMO7XDTTKfauwZ - sTNIi/xPq4YX3fGAKZQ0HpDZQRsgFuh+6acW3B59KAWZlcJCQqnSO/OUdCNz - yHSdFF1hMM7fTHYfMXkvp91oOkxkSHhAtiC2AbB82AaSikt7rNv/03rL6Hv7 - 8vzfjo14m0UGMGGo5Yn8N38Yn24WQTJOGhgBeUm1GpLylaqUDNWN8kRVWrqF - 0/O+FTjtGQjeQVkR73u2Iy9n+cvX3blYZKl1ItRRWgFjf/pP6uV4P7d8IrSG - 1myvMzCCB44GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEJeo9l7ZAFDCx2IS - K4F1IoqAggdgIZWj1bAB165e6eZ0MDx60xsurDWPOFqMlVNmVhrM7O5+n/pB - IGBJ+ylUsi97gaWrIAAyzYqnfbqN8pjwNA55gqw6jx2H8AsRuMUDU76JBUtu - WvxiMgYOmf4V0tt6i5uLxDIEzkfIf4Mh4sSVoZW/wR2A0n5L4YcbJTHRW9D0 - idNVfV2hKFxqX9QpbwoJk4IlW68hidk9mpKKO81bA6rO+IF0OoYg1vTBu26M - ZdFChv9Ypm10jR2vqhbbb15btOyi5pa/wcis8GYBEvANnQgUfGS//YHK9ttd - 1x3JQ6YL87Ye5iXUzOoohHIZ+QHalfyMHPotOy8fsnQyxZd3pkA6utLMItr6 - 3ehPtsT71a17nC30TJFKgopGigccvk24K5kZozZdG2qyy7yycn1JHp53TirK - kdLDfAbwPnhV2+gUycz+51eGvBE3ZdafV+20Wx6hUd6S+F3zef/aeD9D7u9c - soIDj1Lun7f7CBE0qgbvlg0vUHFlpGvtTFK2eoJVAid3odefj9x06yoi23RU - Y8MddhqxvZGtZituqPvfpDqOY3cTu4WJc/VznKcEkOlWU4R4gqw6NWrt1J6l - 1/PqJCqLlvkebbd9R8jZGuy6PgKCsg4oDRjcKpsxbydO9NJwMgUd6UQI4HeZ - vbcpbBOwGcXizE+myTjUbS3UbtZAMGWiBPDa+pkNSet4R8MdkcFnaS0vwa8N - Uot7eqpDUpKvgeJz/Vk0WhUfPkyiaT3idy1i0GDFZD9eV9v3tpyp9xBQMK42 - VZEep2p0mXopUk61xY9tpuZQvw53//Bqq3YXfZghhXlgdeLIcxpp7af5lBAU - iavhoMs5fZwEsSxfkUXVT4w7A4b02X9FeDdQ1TY3orI1yTLKzmx/FgozztTy - CYh1/o6K9r1Mo1INWpngy/kLCaZtySppzTzaDBIoCbDWJjWE5FzMlslaBVqk - PjTemUHuyXsWoRFnik0JW4AMuRYqcsf8KsrI/lDiGgNDR9BxNRrmHplclhvA - 8zAccSQLH53NKh4ma5WPVmbl++6gB6OSeHlwttQDaNBuujoMADF8MWiJNXjj - qfqpKHxlEQEqG/CrTJoWJ+EROl5daH6+TVXTXGzUSIsqOir91Jo4Sd4fJYsh - CpjHy+jyQZiXuYWWOWXV7suBw399Twozm4sKBcefumXMkgiJnSnibGtSV7ia - Ob84hEoQH+Hg/md6rJYefIZYyCOi8IyEV8n4mUr4/DOD0s+BmPxPOgYCDhc8 - o8IyiUajFCR64gVWou8xnR4OG0ged+1zaU75pq04U5kPARg/WfFWHYWo9Ljq - v81+VsWSPEb3ILsX3ZCLT/axkSE3VYEAOaRoT1mE8cc4ENjVRzd50y4I2V4A - rALARll+gSSdE/cXqFI4DrkwkobCATYlYNpvBACASkpQVzJontdmJ5sIjEPE - LVbAhOHIL4mNNI24zLABOzwS6RGi0sJjfZIjnc7qsb5cxU2PtwkLleHbbcgM - tVcmX3EFg+rMg9wGYLT+l4K91pjWmBRN8lssEYNoOcrPu5gvvQDBpWHc3Y+b - Oa5x5bT1IjSKgkCWpducMq3u6zvHQnlS5hDgPTfCZPYmQdM5FVCOcJ0TYoZ8 - +taq1nV2vsX25dtUzxkUcYkRlnXOZx80j53tkJwqFPr2GrN+6I9brL3KYIwp - itRzGROLovhX6tSsawPI0bLwAG/5c2OoPPbs6jSP0K+JSTxmalLw4TDUKAl+ - QfZNzMEH98lw6HGq7aG9njtggw6G4odBrY1ud0KN7/GlF2kjAUyJVJEMiIfj - 0Lq968XdYiNDOwpre8mn5xqJCtt0sZjy9zWZ9xoyUYDoIeAOCrdS9VgaOilP - IG9w/uszbRBWXxiSU76oTgKHAJMFZttWAkBHX5NEcCGksKUbS1Frh76/Kj2G - kSL6tDJRsAqEPibtrKCWU9DNGNjwOndlLZveSqNWTK4yWVrLozff0qdV+ZBn - VvKW280MpQNFMwhnuxj+WA9tcwg4ajUWFP/8WhpQMc+5aDuvQSTvWUo5YXgk - I/5Gcb7Y05CodZ1eJEtyh8r+Z01LmBW1l6a15PeUIBPLs1xg6mqdSenFnB/D - q2UnFnd/aoeh49VLpEWRhdK9Yl3Jyz+0tHNDnD0uQ/Zlox49KYx3YQv4gpMq - CcC1tw9Lfcc/UY23yhG3MJ5dRJIeP+FWBTfqeN+lq+dnu7ua/4CKVzjiaeU4 - ygAo2m4Myono4lSpN4VgyUfGzrMpOXOyOa40mgBBgrxDNmAgyIk2obU7h26U - ZcZKSgk/W97dSORGPYQcLNZBiRCV+hHV3I8IGdGcz+MZugluNH28znhpUnp0 - aTkO/6mPnojAA/5ERXrdBEyTuOR662BfVMAkIVCfVPe5W6P34popQQwNRRjL - 7qKVOpRKA15H3QDHEsh/SOc59L9tvzCa637rBGJMBfvf8QyrUwOVnVebgFSm - r9bg7DReCgweHUukIbHzVPy3UE/lyqnAZWeIPJ4+jmTqrATq/EOs9iQQetyR - VP8xiy7PwA==] + ENC[PKCS7,MIIIzQYJKoZIhvcNAQcDoIIIvjCCCLoCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAtJiS4GluyFbbkmxFKmH+2CWZRD1wotHn8HAc + 7wXckaUSIaUvHY9aor6lxFgjD8vnE5ROmiBTtCsJ0Rmx0oJMO7XDTTKfauwZ + sTNIi/xPq4YX3fGAKZQ0HpDZQRsgFuh+6acW3B59KAWZlcJCQqnSO/OUdCNz + yHSdFF1hMM7fTHYfMXkvp91oOkxkSHhAtiC2AbB82AaSikt7rNv/03rL6Hv7 + 8vzfjo14m0UGMGGo5Yn8N38Yn24WQTJOGhgBeUm1GpLylaqUDNWN8kRVWrqF + 0/O+FTjtGQjeQVkR73u2Iy9n+cvX3blYZKl1ItRRWgFjf/pP6uV4P7d8IrSG + 1myvMzCCB44GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEJeo9l7ZAFDCx2IS + K4F1IoqAggdgIZWj1bAB165e6eZ0MDx60xsurDWPOFqMlVNmVhrM7O5+n/pB + IGBJ+ylUsi97gaWrIAAyzYqnfbqN8pjwNA55gqw6jx2H8AsRuMUDU76JBUtu + WvxiMgYOmf4V0tt6i5uLxDIEzkfIf4Mh4sSVoZW/wR2A0n5L4YcbJTHRW9D0 + idNVfV2hKFxqX9QpbwoJk4IlW68hidk9mpKKO81bA6rO+IF0OoYg1vTBu26M + ZdFChv9Ypm10jR2vqhbbb15btOyi5pa/wcis8GYBEvANnQgUfGS//YHK9ttd + 1x3JQ6YL87Ye5iXUzOoohHIZ+QHalfyMHPotOy8fsnQyxZd3pkA6utLMItr6 + 3ehPtsT71a17nC30TJFKgopGigccvk24K5kZozZdG2qyy7yycn1JHp53TirK + kdLDfAbwPnhV2+gUycz+51eGvBE3ZdafV+20Wx6hUd6S+F3zef/aeD9D7u9c + soIDj1Lun7f7CBE0qgbvlg0vUHFlpGvtTFK2eoJVAid3odefj9x06yoi23RU + Y8MddhqxvZGtZituqPvfpDqOY3cTu4WJc/VznKcEkOlWU4R4gqw6NWrt1J6l + 1/PqJCqLlvkebbd9R8jZGuy6PgKCsg4oDRjcKpsxbydO9NJwMgUd6UQI4HeZ + vbcpbBOwGcXizE+myTjUbS3UbtZAMGWiBPDa+pkNSet4R8MdkcFnaS0vwa8N + Uot7eqpDUpKvgeJz/Vk0WhUfPkyiaT3idy1i0GDFZD9eV9v3tpyp9xBQMK42 + VZEep2p0mXopUk61xY9tpuZQvw53//Bqq3YXfZghhXlgdeLIcxpp7af5lBAU + iavhoMs5fZwEsSxfkUXVT4w7A4b02X9FeDdQ1TY3orI1yTLKzmx/FgozztTy + CYh1/o6K9r1Mo1INWpngy/kLCaZtySppzTzaDBIoCbDWJjWE5FzMlslaBVqk + PjTemUHuyXsWoRFnik0JW4AMuRYqcsf8KsrI/lDiGgNDR9BxNRrmHplclhvA + 8zAccSQLH53NKh4ma5WPVmbl++6gB6OSeHlwttQDaNBuujoMADF8MWiJNXjj + qfqpKHxlEQEqG/CrTJoWJ+EROl5daH6+TVXTXGzUSIsqOir91Jo4Sd4fJYsh + CpjHy+jyQZiXuYWWOWXV7suBw399Twozm4sKBcefumXMkgiJnSnibGtSV7ia + Ob84hEoQH+Hg/md6rJYefIZYyCOi8IyEV8n4mUr4/DOD0s+BmPxPOgYCDhc8 + o8IyiUajFCR64gVWou8xnR4OG0ged+1zaU75pq04U5kPARg/WfFWHYWo9Ljq + v81+VsWSPEb3ILsX3ZCLT/axkSE3VYEAOaRoT1mE8cc4ENjVRzd50y4I2V4A + rALARll+gSSdE/cXqFI4DrkwkobCATYlYNpvBACASkpQVzJontdmJ5sIjEPE + LVbAhOHIL4mNNI24zLABOzwS6RGi0sJjfZIjnc7qsb5cxU2PtwkLleHbbcgM + tVcmX3EFg+rMg9wGYLT+l4K91pjWmBRN8lssEYNoOcrPu5gvvQDBpWHc3Y+b + Oa5x5bT1IjSKgkCWpducMq3u6zvHQnlS5hDgPTfCZPYmQdM5FVCOcJ0TYoZ8 + +taq1nV2vsX25dtUzxkUcYkRlnXOZx80j53tkJwqFPr2GrN+6I9brL3KYIwp + itRzGROLovhX6tSsawPI0bLwAG/5c2OoPPbs6jSP0K+JSTxmalLw4TDUKAl+ + QfZNzMEH98lw6HGq7aG9njtggw6G4odBrY1ud0KN7/GlF2kjAUyJVJEMiIfj + 0Lq968XdYiNDOwpre8mn5xqJCtt0sZjy9zWZ9xoyUYDoIeAOCrdS9VgaOilP + IG9w/uszbRBWXxiSU76oTgKHAJMFZttWAkBHX5NEcCGksKUbS1Frh76/Kj2G + kSL6tDJRsAqEPibtrKCWU9DNGNjwOndlLZveSqNWTK4yWVrLozff0qdV+ZBn + VvKW280MpQNFMwhnuxj+WA9tcwg4ajUWFP/8WhpQMc+5aDuvQSTvWUo5YXgk + I/5Gcb7Y05CodZ1eJEtyh8r+Z01LmBW1l6a15PeUIBPLs1xg6mqdSenFnB/D + q2UnFnd/aoeh49VLpEWRhdK9Yl3Jyz+0tHNDnD0uQ/Zlox49KYx3YQv4gpMq + CcC1tw9Lfcc/UY23yhG3MJ5dRJIeP+FWBTfqeN+lq+dnu7ua/4CKVzjiaeU4 + ygAo2m4Myono4lSpN4VgyUfGzrMpOXOyOa40mgBBgrxDNmAgyIk2obU7h26U + ZcZKSgk/W97dSORGPYQcLNZBiRCV+hHV3I8IGdGcz+MZugluNH28znhpUnp0 + aTkO/6mPnojAA/5ERXrdBEyTuOR662BfVMAkIVCfVPe5W6P34popQQwNRRjL + 7qKVOpRKA15H3QDHEsh/SOc59L9tvzCa637rBGJMBfvf8QyrUwOVnVebgFSm + r9bg7DReCgweHUukIbHzVPy3UE/lyqnAZWeIPJ4+jmTqrATq/EOs9iQQetyR + VP8xiy7PwA==] profiles::debarchive::release_signing_keygrip: 223894064EE26851A245DE9208C5C0ABF772F7A7 profiles::debarchive::release_signing_keyid: "CAcert Debian Archive Signing Key 2019" profiles::debarchive::uploaders: - jandd profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEApecW/rPl4fMSAHNJSzDl5RX8y0JJSVqPj+S6 - g7vxVMMnAOFR+Ex7BvRCNZ5/HISEuijPxPZlvDpaKYA3V8Z0/aHq8KKzOy56 - wA9JSyIXzHv1hQmwLB2R5J2SZnKiAza9g0tJ9nM3q3YwfkofSUrYzPKHUZfm - LzjRCVFYDttlP2M9LedAb3+UE2UAkN0tZ2s/LplxnhBpXH89pqcPBzTmAQqe - bXR2kskXDku/f41+nY8Yv3vEyLGd/uiQR6oer/cPIj7RUI26PTdd+3LlTb0f - W8sqbf8IAo2EpneRL0Pg1kYYd1IV/0I9K8K+93xTsqR52yQdtgo6sUxsWczB - zWIAoTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCz2/HN15HQ/xCGQExX - Ozd9gDCOqJLm9jtlSoCpwDwzowwiCgRj+k1s444lp1RkvgWKCrfO3QkOF3aR - MY7nsz39ve8=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEApecW/rPl4fMSAHNJSzDl5RX8y0JJSVqPj+S6 + g7vxVMMnAOFR+Ex7BvRCNZ5/HISEuijPxPZlvDpaKYA3V8Z0/aHq8KKzOy56 + wA9JSyIXzHv1hQmwLB2R5J2SZnKiAza9g0tJ9nM3q3YwfkofSUrYzPKHUZfm + LzjRCVFYDttlP2M9LedAb3+UE2UAkN0tZ2s/LplxnhBpXH89pqcPBzTmAQqe + bXR2kskXDku/f41+nY8Yv3vEyLGd/uiQR6oer/cPIj7RUI26PTdd+3LlTb0f + W8sqbf8IAo2EpneRL0Pg1kYYd1IV/0I9K8K+93xTsqR52yQdtgo6sUxsWczB + zWIAoTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCz2/HN15HQ/xCGQExX + Ozd9gDCOqJLm9jtlSoCpwDwzowwiCgRj+k1s444lp1RkvgWKCrfO3QkOF3aR + MY7nsz39ve8=] profiles::static_websites::apache_vhosts: 'webstatic.cacert.org': port: 80 @@ -97,8 +97,7 @@ profiles::static_websites::apache_vhosts: directoryindex: - "index.html" directories: - - - path: "/var/www/funding.cacert.org" + - path: "/var/www/funding.cacert.org" options: - "-Includes" - "-Indexes" @@ -127,8 +126,7 @@ profiles::static_websites::apache_vhosts: directoryindex: - "index.html" directories: - - - path: "/var/www/codedocs.cacert.org/html" + - path: "/var/www/codedocs.cacert.org/html" options: - "-Includes" - "-Indexes" @@ -155,8 +153,7 @@ profiles::static_websites::apache_vhosts: directoryindex: - "index.html" directories: - - - path: "/var/www/community.cacert.org" + - path: "/var/www/community.cacert.org" options: - "-Includes" - "-Indexes" @@ -185,8 +182,7 @@ profiles::static_websites::apache_vhosts: directoryindex: - "index.html" directories: - - - path: "/var/www/infradocs.cacert.org/html" + - path: "/var/www/infradocs.cacert.org/html" options: - "-Includes" - "-Indexes" diff --git a/hieradata/nodes/wiki.yaml b/hieradata/nodes/wiki.yaml index f97df73..506a5a1 100644 --- a/hieradata/nodes/wiki.yaml +++ b/hieradata/nodes/wiki.yaml @@ -6,16 +6,16 @@ profiles::base::admins: - jandd - law profiles::icinga2_agent::pki_ticket: > - ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw - DQYJKoZIhvcNAQEBBQAEggEAjOSvvtlZs+Gv7OB6ULHAWRs51L65afl3k0KJ - L3m7c7Oh/N1aFC7ni0EOJym/n3E/WpmM7JsM4SJu5XrBe7sIOLecGeqtpFWb - VXDYVqEXJ4ciZNHB/R2Mnumha497iC9BVD32ZfK1KU+aha8PCb8t1lRHyekD - tnMOR7dIaKJf6NMvpBUwQqyJ0ly1c+588eFfJxC2XX0xOp/UWlK98DNBZYLj - ax2Grcb7lYa9FywseTUBOe3NQsUJrneyTLluKo8ANGqIDunRN2KtA0ai6/gN - wc9BWBJKrSUFI3iKSvf6ar5N3Hpdk8lHbMeK/XfcLxIXcQUVlu3Y5XhVf/aG - CENzHTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCxh2btktTQOw/SivS6 - H9/SgDAg/43TaVhYJ48kzhuxpSRinR6RqwAWqQy4RmEOlvLKaxDbG8h5B3ap - CPwQco1Eyew=] + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAjOSvvtlZs+Gv7OB6ULHAWRs51L65afl3k0KJ + L3m7c7Oh/N1aFC7ni0EOJym/n3E/WpmM7JsM4SJu5XrBe7sIOLecGeqtpFWb + VXDYVqEXJ4ciZNHB/R2Mnumha497iC9BVD32ZfK1KU+aha8PCb8t1lRHyekD + tnMOR7dIaKJf6NMvpBUwQqyJ0ly1c+588eFfJxC2XX0xOp/UWlK98DNBZYLj + ax2Grcb7lYa9FywseTUBOe3NQsUJrneyTLluKo8ANGqIDunRN2KtA0ai6/gN + wc9BWBJKrSUFI3iKSvf6ar5N3Hpdk8lHbMeK/XfcLxIXcQUVlu3Y5XhVf/aG + CENzHTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCxh2btktTQOw/SivS6 + H9/SgDAg/43TaVhYJ48kzhuxpSRinR6RqwAWqQy4RmEOlvLKaxDbG8h5B3ap + CPwQco1Eyew=] profiles::x509cert_common::certificates: 'wiki.cacert.org': certificate: | diff --git a/sitemodules/profiles/files/icinga2_master/check_puppetdb_nodes b/sitemodules/profiles/files/icinga2_master/check_puppetdb_nodes index 727a328..1145e4e 100644 --- a/sitemodules/profiles/files/icinga2_master/check_puppetdb_nodes +++ b/sitemodules/profiles/files/icinga2_master/check_puppetdb_nodes @@ -1,253 +1,277 @@ -#!/usr/bin/perl - -# Copyright (c) 2014, Evgeni Golov -# All rights reserved. -# -# Redistribution and use in source and binary forms, with or without modification, -# are permitted provided that the following conditions are met: -# -# * Redistributions of source code must retain the above copyright notice, this -# list of conditions and the following disclaimer. -# -# * Redistributions in binary form must reproduce the above copyright notice, this -# list of conditions and the following disclaimer in the documentation and/or -# other materials provided with the distribution. -# -# * Neither the name of the {organization} nor the names of its -# contributors may be used to endorse or promote products derived from -# this software without specific prior written permission. -# -# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND -# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED -# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE -# DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR -# ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES -# (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; -# LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON -# ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT -# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS -# SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - -use strict; -use warnings; -use JSON; -use LWP; -use Monitoring::Plugin; -use Date::Parse; - -my $np = Monitoring::Plugin->new( - usage => "Usage: %s [ -H|--hostname=<hostname>] " - . "[ -p|--port=<port> ] [-s] [ -w|--warning=<minutes> ] " - . "[ -c|--critical=<minutes> ] [ -W|--warnfails=<num> ] " - . "[ -C|--critfails=<num> ] [ -n|--node=<node> ]" - . "[ -a|--apiversion=<num> ]" - . "[ -i|--ignore=<list> ]", - shortname => 'Check last node runs from PuppetDB', - url => 'https://github.com/evgeni/check_puppetdb_nodes', - version => '1.0', - license => 'This plugin is free software, and comes with ABSOLUTELY -NO WARRANTY. It may be used, redistributed and/or modified under -the terms of the BSD 3-clause license.', -); - -$np->add_arg( - spec => 'warning|w=i', - help => "Exit with WARNING status if nodes did not update for " - . "more than INTEGER minutes (default: %s)", - default => 120, -); - -$np->add_arg( - spec => 'critical|c=i', - help => "Exit with CRITICAL status if nodes did not update for " - . "more than INTEGER minutes (default: %s)", - default => 1440, -); - -$np->add_arg( - spec => 'warnfails|W=i', - help => "Exit with WARNING status if nodes had at least INTEGER " - . "failures in the last run (default: %s)", - default => 1, -); - -$np->add_arg( - spec => 'critfails|C=i', - help => "Exit with CRITICAL status if nodes had at least INTEGER " - . "failures in the last run (default: %s)", - default => 1, -); - -$np->add_arg( - spec => 'hostname|H=s', - help => 'Hostname of the PuppetDB (default: %s)', - default => 'localhost', -); - -$np->add_arg( - spec => 'port|p=i', - help => 'Port PuppetDB is running on (default: %s)', - default => 8080, -); - -$np->add_arg( - spec => 'node|n=s', - help => 'Node name to check, if not given, all nodes will be checked', -); - -$np->add_arg( - spec => 'ssl|s', - help => "Use HTTPS instead of HTTP", -); - -$np->add_arg( - spec => 'insecure|k', - help => "Allow connections via HTTPS without checking certificates", -); - -$np->add_arg( - spec => 'apiversion|a=n', - help => 'Specify PupppetDB API version (default: %s)', - default => 3, -); - -$np->add_arg( - spec => 'ignore|i=s', - help => 'Node names to ignore (comma-separated list) (default: %s)', - default => '', -); - -$np->getopts; - -my %apiurls = ( - 3 => { 'nodes' => 'v3/nodes', 'event-counts' => 'v3/event-counts' }, - 4 => { 'nodes' => 'pdb/query/v4/nodes', 'event-counts' => 'pdb/query/v4/event-counts', 'logs' => 'pdb/query/v4/reports/{hash}/logs' }, -); -if ( !exists $apiurls{$np->opts->apiversion} ) { - $np->nagios_exit( 'UNKNOWN', 'Unsupported PuppetDB API version ' . $np->opts->apiversion ); +#!/usr/bin/env python3 +"""Nagios/Icinga plugin to check puppetdb status of a node.""" + +import argparse +import logging +from datetime import datetime +from urllib.parse import urljoin + +import nagiosplugin +import requests + +_log = logging.getLogger("check_puppetdb_nodes") + +api_urls = { + 3: {"nodes": "v3/nodes", "event-counts": "v3/event-counts"}, + 4: { + "nodes": "pdb/query/v4/nodes", + "event-counts": "pdb/query/v4/event-counts", + "logs": "pdb/query/v4/reports/{hash}/logs", + }, } -my @ignore_list = split( ',', $np->opts->ignore ); -my $url = sprintf( 'http%s://%s:%d/', - defined( $np->opts->ssl ) ? 's' : '', - $np->opts->hostname, $np->opts->port ); +class BoolContext(nagiosplugin.Context): + def evaluate(self, metric, resource): + if metric != 0: + return self.result_cls(nagiosplugin.Critical, metric) -my $ua = new LWP::UserAgent; -$ua->default_header( 'Accept' => 'application/json' ); -if ( defined( $np->opts->insecure ) ) { - $ua->ssl_opts( verify_hostname => 0 ,SSL_verify_mode => 0x00); -} -my %parameters = (); -if ( defined( $np->opts->node ) ) { - %parameters = ( 'query' => '["=","certname","' . $np->opts->node . '"]' ); -} -my $uri = URI->new( $url . $apiurls{$np->opts->apiversion}{'nodes'} ); -$uri->query_form(%parameters); -my $response = $ua->get($uri); +class PuppetDBReport(nagiosplugin.Resource): + """Domain model: last report for node. -if ( !$response->is_success ) { - $np->nagios_exit( 'UNKNOWN', - $response->code . ": " . $response->status_line ); -} + Determines the age of the last puppetdb report for the given node. + """ -my $data = decode_json( $response->decoded_content ); + def __init__(self, api_client, node_name, ignored): + self.api_client = api_client + self.node_name = node_name + self.ignored = ignored or [] -my $now = time(); + def probe(self): + node_info = self.api_client.fetch_node_information(self.node_name) -if ( defined( $np->opts->node ) and !@$data ) { - $np->add_message( CRITICAL, - $np->opts->node . " not found in puppetdb\n" ); -} + for node in node_info: + if "certname" in node: + certname = node["certname"] + else: + certname = node["name"] + deactivated = node["deactivated"] + catalog_timestamp = node["catalog_timestamp"] + report_hash = node["latest_report_hash"] + ts = datetime.strptime(catalog_timestamp, "%Y-%m-%dT%H:%M:%S.%fZ") + delta = datetime.utcnow() - ts -foreach my $node (@$data) { - my $certname = defined($node->{'certname'}) ? $node->{'certname'} : $node->{'name'} ; - my $deactivated = $node->{'deactivated'}; - my $catalog_timestamp = $node->{'catalog_timestamp'}; - my $report_hash = $node->{'latest_report_hash'}; - my $ts = str2time($catalog_timestamp); - - next if grep { $certname eq $_ } @ignore_list; - - if ( !defined $deactivated and ( !length $catalog_timestamp or !length $report_hash )) { - $np->add_message( CRITICAL, - "$certname last run UNAVAILABLE\n" ); - } - if ( !defined $deactivated and length $catalog_timestamp and $report_hash) { - my $delta = ( $now - $ts ); - if ( $delta > ( $np->opts->critical * 60 ) ) { - $np->add_message( CRITICAL, - "$certname did not update since $catalog_timestamp\n" ); - } - elsif ( $delta > ( $np->opts->warning * 60 ) ) { - $np->add_message( WARNING, - "$certname did not update since $catalog_timestamp\n" ); - } - - my %apiparameters = ( - 3 => { - 'query' => '["and",["=","certname","' - . $certname - . '"],["=","latest-report?",true]]', - 'summarize-by' => 'certname', - 'count-by' => 'resource', - }, - 4 => { - 'query' => '["and",["=","certname","' - . $certname - . '"],["=","latest_report?",true]]', - 'summarize_by' => 'certname', - 'count_by' => 'resource', - } - ); - my $uri = URI->new( $url . $apiurls{$np->opts->apiversion}{'event-counts'} ); - $uri->query_form($apiparameters{$np->opts->apiversion}); - $response = $ua->get($uri); - - if ( $response->is_success ) { - my $node_data = decode_json( $response->decoded_content ); - - my $failures = 0; - if ( defined( @$node_data[0] ) - and defined( @$node_data[0]->{'failures'} ) ) - { - $failures = @$node_data[0]->{'failures'}; - } + if deactivated: + yield nagiosplugin.Metric(f"missing-{certname}", 1, min=0) + continue - if ( $failures >= $np->opts->critfails ) { - $np->add_message( CRITICAL, - "$certname had $failures failures in the last run\n" ); - } - elsif ( $failures >= $np->opts->warnfails ) { - $np->add_message( WARNING, - "$certname had $failures failures in the last run\n" ); - } - elsif ( exists $apiurls{$np->opts->apiversion}{'logs'} ) { - my $apiurl = $apiurls{$np->opts->apiversion}{'logs'}; - $apiurl =~ s/{hash}/$report_hash/; - $uri = URI->new( $url . $apiurl ); - $response = $ua->get($uri); - if ( $response->is_success ) { - my $logs = decode_json( $response->decoded_content ); - foreach my $log (@$logs) { - my $tags = $log->{'tags'}; - if ( grep(/^err$/, @$tags) ) { - $np->add_message( WARNING, "$certname, $log->{'message'}" ); - } - } - } - } + if certname in self.ignored: + continue - } else { - $np->nagios_exit( 'UNKNOWN', 'Unsupported query ' . $response->decoded_content); - } + yield nagiosplugin.Metric( + f"last-{certname}", round(delta.total_seconds()), "s", min=0 + ) - } -} + failures = self.api_client.fetch_failure_report(certname, report_hash) + yield nagiosplugin.Metric(f"failed-{certname}", failures, min=0) + + +def comma_separated(string): + result = [] + for part in [item.trim for item in string.split(",")]: + if len(part) > 0: + result.append(part) + return result -my $code; -my $message; -( $code, $message ) = $np->check_messages; -$np->nagios_exit( $code, $message ); +class PuppetDBClient: + def __init__(self, hostname, port, tls, insecure, roots, api_version): + scheme = tls and "https" or "http" + self.base_url = f"{scheme}://{hostname}:{port}/" + self.allow_insecure = insecure + self.use_roots = roots + self.api_version = api_version + + self.client = requests.Session() + self.client.headers = {"Accept": "application/json"} + self.node_info = [] + + def fetch_node_information(self, node_name): + if self.node_info: + return self.node_info + + url = urljoin(self.base_url, api_urls[self.api_version]["nodes"]) + if node_name: + r = self.client.get( + url, params={"query": f'["=","certname","{node_name}"]'} + ) + else: + r = self.client.get(url) + + r.raise_for_status() + + self.node_info = r.json() + + return self.node_info + + def fetch_failure_report(self, cert_name, report_hash): + url = urljoin(self.base_url, api_urls[self.api_version]["event-counts"]) + + if self.api_version == 3: + query_args = { + "query": f'["and",["=","certname","{cert_name}"],["=","latest-report?",true]]', + "summarize-by": "certname", + "count-by": "resource", + } + else: + query_args = { + "query": f'["and",["=","certname","{cert_name}"],["=","latest_report?",true]]', + "summarize_by": "certname", + "count_by": "resource", + } + + r = self.client.get(url, params=query_args) + + r.raise_for_status() + + report = r.json() + + failures = 0 + + if report and "failures" in report[0]: + failures += report[0]["failures"] + + if "logs" in api_urls[self.api_version]: + url = urljoin(self.base_url, api_urls[self.api_version]["logs"]).format( + hash=report_hash + ) + self.client.get(url) + + r.raise_for_status() + + logs = r.json() + + for log in logs: + if "tags" in log and "err" in log["tags"]: + failures += 1 + + return failures + + def get_cert_names(self, node_name): + result = [] + + for node in self.fetch_node_information(node_name): + if "certname" in node: + result.append(node["certname"]) + else: + result.append(node["name"]) + + return sorted(result) + + +@nagiosplugin.guarded +def main(): + argp = argparse.ArgumentParser(description=__doc__) + + argp.add_argument( + "-w", + "--warning", + type=int, + default=120, + help="Exit with WARNING status if nodes did not update for more then given minutes", + ) + argp.add_argument( + "-c", + "--critical", + type=int, + default=1440, + help="Exit with CRITICAL status if nodes did not update for more then given minutes", + ) + argp.add_argument( + "-W", + "--warnfails", + type=int, + default=1, + help="Exit with WARNING status if nodes had at least the given number of failures in the last run", + ) + argp.add_argument( + "-C", + "--critfails", + type=int, + default=1, + help="Exit with CRITICAL status if nodes had at least the given number of failures in the last run", + ) + argp.add_argument( + "-H", + "--hostname", + type=str, + default="localhost", + help="Hostname of the PuppetDB", + ) + argp.add_argument( + "-p", "--port", type=int, default=8080, help="Port PuppetDB is running on" + ) + argp.add_argument( + "-n", + "--node", + type=str, + help="Node name to check, if not given, all nodes will be checked", + ) + argp.add_argument( + "-t", + "--tls", + action="store_true", + help="Use HTTPS instead of HTTP", + ) + argp.add_argument( + "-k", + "--insecure", + action="store_true", + help="Allow connections via HTTPS without checking certificates", + ) + argp.add_argument( + "-r", + "--roots", + type=str, + help="Use the given root certificate file for certificate validation", + ) + argp.add_argument( + "-a", + "--apiversion", + dest="api_version", + type=int, + default=4, + choices=api_urls.keys(), + help="Specify PuppetDB API version", + ) + argp.add_argument( + "-i", + "--ignore", + type=comma_separated, + help="Node names to ignore (comma-separated list)", + ) + argp.add_argument( + "-v", + "--verbose", + action="count", + default=0, + help="increase output verbosity (use up to 3 times)", + ) + + args = argp.parse_args() + + api_client = PuppetDBClient( + args.hostname, args.port, args.tls, args.insecure, args.roots, args.api_version + ) + + check = nagiosplugin.Check(PuppetDBReport(api_client, args.node, args.ignore)) + + for certname in api_client.get_cert_names(args.node): + check.add(BoolContext(f"missing-{certname}")) + check.add( + nagiosplugin.ScalarContext( + f"last-{certname}", args.warning * 60, args.critical * 60 + ) + ) + check.add( + nagiosplugin.ScalarContext( + f"failed-{certname}", f"@{args.warnfails}:", f"@{args.critfails}:" + ) + ) + + check.main(verbose=args.verbose) + + +if __name__ == "__main__": + main() diff --git a/sitemodules/profiles/files/icinga2_master/icinga2-git-pull-hook b/sitemodules/profiles/files/icinga2_master/icinga2-git-pull-hook index a0d3711..c786017 100644 --- a/sitemodules/profiles/files/icinga2_master/icinga2-git-pull-hook +++ b/sitemodules/profiles/files/icinga2_master/icinga2-git-pull-hook @@ -88,6 +88,17 @@ class GitHookRequestHandler(BaseHTTPRequestHandler): self.wfile.write(("%s\r\n" % message).encode("UTF-8")) def _handle_pull(self): + args = [ + "sshpass", + "-e", + "-P", + "passphrase", + "git", + "pull", + GIT_REPOSITORY, + GIT_BRANCH, + ] + self.log.info("running '%s'", " ".join(args)) try: git_proc = subprocess.run( [ @@ -96,15 +107,12 @@ class GitHookRequestHandler(BaseHTTPRequestHandler): "-P", "passphrase", "git", - "subtree", "pull", - "--prefix", - "icinga2/conf.d", GIT_REPOSITORY, GIT_BRANCH, ], env=ENV_FOR_GIT, - cwd="/etc", + cwd=GIT_DIRECTORY, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, check=True, diff --git a/sitemodules/profiles/manifests/base.pp b/sitemodules/profiles/manifests/base.pp index fd6f225..ff3d9e4 100644 --- a/sitemodules/profiles/manifests/base.pp +++ b/sitemodules/profiles/manifests/base.pp @@ -14,9 +14,7 @@ # # @param rootalias alias that gets emails for root # -# @param crl_job_enable whether to setup the hourly CRL update job -# -# @param crl_job_services which services to reload after the CRL update +# @param crl_job configure the hourly CRL update job # # @param is_external whether the node is outside of CAcert infrastructure # @@ -36,15 +34,21 @@ # Copyright # --------- # -# Copyright 2016-2021 Jan Dittberner +# Copyright 2016-2022 Jan Dittberner # class profiles::base ( - Array[String] $admins = [], - Hash[String, Data] $users = {}, - String $rootalias = "${trusted['certname']}-admin@cacert.org", - Boolean $crl_job_enable = false, - Array[String] $crl_job_services = [], - Boolean $is_external = false, + Array[String] $admins = [], + Hash[String, Data] $users = {}, + String $rootalias = "${trusted['certname']}-admin@cacert.org", + Hash[String, Data] $crl_job = { + 'enable' => false, + 'hostname' => $trusted['certname'], + 'services' => [], + 'check_url' => 'https://monitor.infra.cacert.org:5665/v1/actions/process-check-result', + 'api_user' => '', + 'api_password' => '', + }, + Boolean $is_external = false, ) { # ensure admin users for this container $admins.each |String $username| { @@ -172,7 +176,10 @@ class profiles::base ( repos => 'main', release => "${::lsbdistcodename}-updates", } - if Integer($facts['os']['release']['major']) < 11 { + + $os_major = Integer($facts['os']['release']['major']) + + if $os_major < 11 { apt::source { "security.debian.org-${::lsbdistcodename}-security": location => 'http://security.debian.org/debian-security', repos => 'main', @@ -255,7 +262,11 @@ class profiles::base ( subscribe => [File[$cacert_class1_file], File[$cacert_class3_file]], } - if ($crl_job_enable) { + if ($crl_job['enable']) { + package { 'python3-requests': + ensure => installed, + } + file { '/var/local/ssl': ensure => directory, owner => 'root', @@ -278,9 +289,17 @@ class profiles::base ( mode => '0755', content => epp( 'profiles/base/update-crls.epp', - { 'services' => $crl_job_services }), + { + 'services' => $crl_job['services'], + 'check_url' => $crl_job['check_url'], + 'api_user' => $crl_job['api_user'], + 'api_password' => $crl_job['api_password'], + 'hostname' => $crl_job['hostname'], + }, + ), require => [ Package['ca-certificates'], + Package['python3-requests'], File['/var/local/ssl/crls'], File[$cacert_class1_file], File[$cacert_class3_file] diff --git a/sitemodules/profiles/manifests/gitea.pp b/sitemodules/profiles/manifests/gitea.pp index 27a882e..0f9d9f6 100644 --- a/sitemodules/profiles/manifests/gitea.pp +++ b/sitemodules/profiles/manifests/gitea.pp @@ -49,8 +49,8 @@ class profiles::gitea ( String $gitea_fqdn = 'code.cacert.org', String $gitea_socket = '/run/gitea/gitea.sock', ) { - $gitea_version = '1.16.6' - $gitea_checksum = 'a96751af12d5e96301a97c280bafb92782e0e9b7a0bbe8960c704c0c0361e576' + $gitea_version = '1.16.9' + $gitea_checksum = '821dd30afed9ae42b18e727174b078ea9118a6ccc5106d8246bebf8180fcbef3' $gitea_url = "https://dl.gitea.io/gitea/${gitea_version}/gitea-${gitea_version}-linux-amd64" $gitea_service = '/etc/systemd/system/gitea.service' diff --git a/sitemodules/profiles/manifests/icinga2_master.pp b/sitemodules/profiles/manifests/icinga2_master.pp index e8f4968..6f83146 100644 --- a/sitemodules/profiles/manifests/icinga2_master.pp +++ b/sitemodules/profiles/manifests/icinga2_master.pp @@ -50,7 +50,7 @@ # Copyright # --------- # -# Copyright 2019-2021 Jan Dittberner +# Copyright 2019-2022 Jan Dittberner class profiles::icinga2_master ( String $ido_database_password, String $web2_database_password, @@ -69,7 +69,7 @@ class profiles::icinga2_master ( include profiles::systemd_reload include postgresql::server - class { '::icinga2': + class { 'icinga2': manage_repo => false, features => ['mainlog', 'checker', 'notification'], constants => { @@ -78,7 +78,7 @@ class profiles::icinga2_master ( }, } - class { '::icinga2::pki::ca': + class { 'icinga2::pki::ca': ca_cert => $ca_certificate, ca_key => $ca_key, } @@ -88,7 +88,7 @@ class profiles::icinga2_master ( password => postgresql_password('icinga2', $ido_database_password), } - class { '::icinga2::feature::idopgsql': + class { 'icinga2::feature::idopgsql': user => 'icinga2', password => $ido_database_password, database => 'icinga2', @@ -96,7 +96,7 @@ class profiles::icinga2_master ( require => Postgresql::Server::Db['icinga2'], } - class { '::icinga2::feature::api': + class { 'icinga2::feature::api': pki => 'none', } @@ -123,7 +123,7 @@ class profiles::icinga2_master ( ), } - class { '::icingaweb2': + class { 'icingaweb2': manage_repo => false, import_schema => true, db_type => 'pgsql', @@ -134,7 +134,7 @@ class profiles::icinga2_master ( require => Postgresql::Server::Db['icingaweb2'], } - class { '::icingaweb2::module::monitoring': + class { 'icingaweb2::module::monitoring': ido_type => 'pgsql', ido_host => 'localhost', ido_port => 5432, @@ -146,19 +146,19 @@ class profiles::icinga2_master ( transport => 'api', username => 'root', password => $api_users['root']['password'], - } - } + }, + }, } icingaweb2::config::authmethod { 'external-authentication': backend => 'external', - require => Class['::icingaweb2'], + require => Class['icingaweb2'], } icingaweb2::config::role { 'admin': users => join($icingaweb_admins, ','), permissions => '*', - require => Class['::icingaweb2'], + require => Class['icingaweb2'], } package { ['sshpass', 'git']: @@ -206,14 +206,21 @@ class profiles::icinga2_master ( notify => Exec['reload systemd configuration'], } - file { '/usr/local/lib/nagios-plugins': + file { '/usr/local/lib/nagios': ensure => directory, owner => 'root', group => 'staff', - mode => '0755' + mode => '0755', } - file { '/usr/local/lib/nagios-plugins/check_puppetdb_nodes': + file { '/usr/local/lib/nagios/plugins': + ensure => directory, + owner => 'root', + group => 'staff', + mode => '0755', + } + + file { '/usr/local/lib/nagios/plugins/check_puppetdb_nodes': ensure => file, owner => 'root', group => 'staff', @@ -221,6 +228,19 @@ class profiles::icinga2_master ( source => 'puppet:///modules/profiles/icinga2_master/check_puppetdb_nodes', } + package {['rsync', 'python3-nagiosplugin', 'python3-cryptography']: + ensure => present, + } + + file { '/usr/local/lib/nagios/plugins/check_cacert_crl': + ensure => file, + owner => 'root', + group => 'root', + mode => '0755', + source => 'puppet:///modules/profiles/icinga2_external_commands/cacert_check_crl.py', + require => [Package['rsync'], Package['python3-nagiosplugin'], Package['python3-cryptography']], + } + service { 'icinga2-git-pull-hook': ensure => running, enable => true, @@ -231,7 +251,7 @@ class profiles::icinga2_master ( ], } - include ::icinga2 + include icinga2 file { '/etc/icinga2/zones.d/global-templates': ensure => directory, @@ -262,10 +282,29 @@ class profiles::icinga2_master ( target => '/etc/icinga2/zones.d/global-templates/ocsp-command.conf', } ::icinga2::object::checkcommand { 'cacert_crl': - ensure => present, - command => [ + ensure => present, + command => [ '/usr/local/lib/nagios/plugins/check_cacert_crl', ], + arguments => { + '--rsync-url' => { + 'value' => '$cacert_crl_rsync_url$', + 'description' => 'rsync URL to check', + }, + '--warning-last-age' => { + 'value' => '$cacert_crl_warning_last_age$', + 'description' => 'warning if last age is more than that many minutes', + }, + '--critical-last-age' => { + 'value' => '$cacert_crl_critical_last_age$', + 'description' => 'critical if last age is more than that many minutes', + }, + }, + vars => { + 'cacert_crl_rsync_url' => 'rsync://crl.cacert.org/crl/', + 'cacert_crl_warning_last_age' => '1500', # 25h + 'cacert_crl_critical_last_age' => '2160', # 36h + }, target => '/etc/icinga2/zones.d/global-templates/cacert_crl-command.conf', } diff --git a/sitemodules/profiles/manifests/x509cert_common.pp b/sitemodules/profiles/manifests/x509cert_common.pp index 935d44c..88edace 100644 --- a/sitemodules/profiles/manifests/x509cert_common.pp +++ b/sitemodules/profiles/manifests/x509cert_common.pp @@ -62,7 +62,7 @@ class profiles::x509cert_common ( file { "/etc/ssl/private/${name}.key.pem": ensure => file, owner => pick($cert_info['key_owner'], 'root'), - group => pick($cert_info['key_group'], 'root'), + group => pick($cert_info['key_group'], 'ssl-cert'), mode => pick($cert_info['key_mode'], '0640'), content => $cert_info['private_key'], } diff --git a/sitemodules/profiles/templates/base/update-crls.epp b/sitemodules/profiles/templates/base/update-crls.epp index eefdfe2..def45ab 100755 --- a/sitemodules/profiles/templates/base/update-crls.epp +++ b/sitemodules/profiles/templates/base/update-crls.epp @@ -1,30 +1,148 @@ -<%- | Array[String] $services | -%> -#!/bin/sh +<%- | + Array[String] $services, + String $check_url, + String $api_user, + String $api_password, + String $hostname, +| -%> +#!/usr/bin/env python3 # THIS FILE IS MANAGED BY PUPPET, MANUAL CHANGES WILL BE OVERWRITTEN AT THE # NEXT PUPPET RUN. -set -e +import glob +import subprocess +import sys +from datetime import datetime +from os import path -CRL_PATH='/var/local/ssl/crls/' -CA_CERT='/etc/ssl/certs/ca-certificates.crt' -RSYNC_LOCATION='crl.cacert.org::crl' +import requests -rsync -aqz "$RSYNC_LOCATION" "$CRL_PATH" +CRL_PATH = "/var/local/ssl/crls/" +CA_CERT = "/etc/ssl/certs/ca-certificates.crt" +RSYNC_LOCATION = "crl2.intra.cacert.org::crl" +ICINGA_CA = "/var/lib/icinga2/certs/ca.crt" -for crl in "$CRL_PATH"*.crl -do - if openssl crl -noout -inform DER -in "$crl" -CAfile "$CA_CERT" 2>/dev/null - then - openssl crl -inform DER -in "$crl" -out "$crl".pem - else - echo "Error: Could not validate the CRL at $crl" >&2 - fi -done -c_rehash "$CRL_PATH" 2>/dev/null >&2 -<% $services.each |$service| { -%> -service <%= $service %> reload > /dev/null -<% } %> +def json_timestamp(ts): + return int(ts.timestamp()) -exit 0 + +def report_result(success, output, start): + data = { + "type": "Service", + "filter": 'host.name=="<%= $hostname %>" && service.name=="crl-sync"', + "exit_status": 0 if success else 2, + "plugin_output": "OK" if success else f"CRITICAL CRL sync failed\n{output}", + "check_source": "<%= $hostname %>", + "execution_start": json_timestamp(start), + "execution_end": json_timestamp(datetime.utcnow()), + "ttl": 3720, + } + + r = requests.post( + "<%= $check_url %>", + auth=("<%= $api_user %>", "<%= $api_password %>"), + headers={"Accept": "application/json"}, + json=data, + verify=ICINGA_CA, + ) + + if not r.ok: + print("could not submit passive check") + print(r.status_code, r.reason) + print(r.text) + sys.exit(1) + + +def run_command(args, timeout=10): + try: + res = subprocess.run(args, capture_output=True, timeout=timeout, text=True) + except subprocess.TimeoutExpired: + return False, "timeout of {} expired running '{}'".format( + timeout, " ".join(args) + ) + + return res.returncode == 0, res.stderr + + +def verify_crl(crl, ca_certificates=CA_CERT): + return run_command( + [ + "openssl", + "crl", + "-noout", + "-inform", + "DER", + "-in", + crl, + "-CAfile", + ca_certificates, + ], + ) + + +def convert_to_pem(crl): + return run_command( + ["openssl", "crl", "-inform", "DER", "-in", crl, "-out", f"{crl}.pem"] + ) + + +def rehash_crls(crl_path=CRL_PATH): + return run_command(["c_rehash", crl_path]) + + +def run_rsync(rsync_source, dest_path): + return run_command(["rsync", "-aqz", rsync_source, dest_path], 60) + + +def restart_service(service): + return run_command(["systemctl", "restart", f"{service}.service"], 30) + + +def main(): + start = datetime.utcnow() + + ok, output = run_rsync(RSYNC_LOCATION, CRL_PATH) + if not ok: + report_result(False, f"rsync run failed:\n{output}", start) + return + + error_output = [] + + for crl in glob.glob(path.join(CRL_PATH, "*.crl")): + ok, output = verify_crl(crl) + if not ok: + error_output.append(f"crl validation for {crl} failed:\n{output}") + continue + + ok, output = convert_to_pem(crl) + if not ok: + error_output.append(f"pem conversion for {crl} failed:\n{output}") + + if error_output: + report_result(False, "\n\n".join(error_output), start) + return + + ok, output = rehash_crls(CRL_PATH) + if not ok: + report_result(False, f"c_rehash for {CRL_PATH} failed:\n{output}", start) + return + + services = [<% if $services { %>"<%= $services.join(", ") %>"<% } %>] + + for service in services: + ok, output = restart_service(service) + if not ok: + error_output.append(f"service restart failed for {service}:\n{output}") + continue + + if error_output: + report_result(False, "\n\n".join(error_output), start) + return + + report_result(True, "", start) + + +if __name__ == "__main__": + main() diff --git a/sitemodules/profiles/templates/gitea/app.ini.epp b/sitemodules/profiles/templates/gitea/app.ini.epp index 0aa9945..a1854f2 100644 --- a/sitemodules/profiles/templates/gitea/app.ini.epp +++ b/sitemodules/profiles/templates/gitea/app.ini.epp @@ -81,6 +81,12 @@ COOKIE_SECURE = true DOMAIN = <%= $gitea_fqdn %> SAME_SITE = strict +[migrations] +ALLOW_LOCALNETWORKS = true + +[webhook] +ALLOWED_HOST_LIST = external,private + [log] MODE = file,console ENABLE_ACCESS_LOG = true diff --git a/sitemodules/profiles/templates/squid/squid.conf.epp b/sitemodules/profiles/templates/squid/squid.conf.epp index cab60bf..d071279 100644 --- a/sitemodules/profiles/templates/squid/squid.conf.epp +++ b/sitemodules/profiles/templates/squid/squid.conf.epp @@ -13,3 +13,4 @@ http_access <%= $access_rule -%> <% } %> maximum_object_size 500 MB +cache_dir aufs /var/spool/squid 20000 16 256 diff --git a/sitemodules/roles/manifests/authserver.pp b/sitemodules/roles/manifests/authserver.pp new file mode 100644 index 0000000..792bc71 --- /dev/null +++ b/sitemodules/roles/manifests/authserver.pp @@ -0,0 +1,29 @@ +# Class: roles::authserver +# ======================== +# +# This class defines the authserver role for a Hydra OAuth2/OpenID connect API +# server used for authentication/authorization. +# You should assign this class using hiera or via an ENC. +# +# Examples +# -------- +# +# @example +# class { 'roles::authserver': } +# +# Authors +# ------- +# +# Jan Dittberner <jandd@cacert.org> +# +# Copyright +# --------- +# +# Copyright 2022 Jan Dittberner +# +class roles::authserver { + include profiles::base + include profiles::rsyslog + include profiles::icinga2_agent +} + diff --git a/sitemodules/roles/manifests/idp.pp b/sitemodules/roles/manifests/idp.pp new file mode 100644 index 0000000..2878931 --- /dev/null +++ b/sitemodules/roles/manifests/idp.pp @@ -0,0 +1,29 @@ +# Class: roles::idp +# ======================== +# +# This class defines the idp role for an OAuth2/OpenID identity provider +# used for authentication/authorization. +# You should assign this class using hiera or via an ENC. +# +# Examples +# -------- +# +# @example +# class { 'roles::idp': } +# +# Authors +# ------- +# +# Jan Dittberner <jandd@cacert.org> +# +# Copyright +# --------- +# +# Copyright 2022 Jan Dittberner +# +class roles::idp { + include profiles::base + include profiles::rsyslog + include profiles::icinga2_agent +} + |