summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--README.md20
-rw-r--r--hieradata/common.yaml148
-rw-r--r--hieradata/nodes/authserver.yaml16
-rw-r--r--hieradata/nodes/blog.yaml20
-rw-r--r--hieradata/nodes/bugs.yaml20
-rw-r--r--hieradata/nodes/code.yaml40
-rw-r--r--hieradata/nodes/community.yaml420
-rw-r--r--hieradata/nodes/email.yaml294
-rw-r--r--hieradata/nodes/emailout.yaml20
-rw-r--r--hieradata/nodes/extmon.yaml223
-rw-r--r--hieradata/nodes/git.yaml20
-rw-r--r--hieradata/nodes/idp.yaml16
-rw-r--r--hieradata/nodes/ircserver.yaml20
-rw-r--r--hieradata/nodes/issue.yaml20
-rw-r--r--hieradata/nodes/jenkins.yaml20
-rw-r--r--hieradata/nodes/mariadb.yaml20
-rw-r--r--hieradata/nodes/monitor.yaml731
-rw-r--r--hieradata/nodes/motion.yaml60
-rw-r--r--hieradata/nodes/nextcloud.yaml20
-rw-r--r--hieradata/nodes/pgsql.yaml20
-rw-r--r--hieradata/nodes/proxyin.yaml20
-rw-r--r--hieradata/nodes/puppet.yaml42
-rw-r--r--hieradata/nodes/svn.yaml41
-rw-r--r--hieradata/nodes/test3.yaml20
-rw-r--r--hieradata/nodes/translations.yaml20
-rw-r--r--hieradata/nodes/web.yaml36
-rw-r--r--hieradata/nodes/webstatic.yaml134
-rw-r--r--hieradata/nodes/wiki.yaml20
-rw-r--r--sitemodules/profiles/files/icinga2_master/check_puppetdb_nodes500
-rw-r--r--sitemodules/profiles/files/icinga2_master/icinga2-git-pull-hook16
-rw-r--r--sitemodules/profiles/manifests/base.pp45
-rw-r--r--sitemodules/profiles/manifests/gitea.pp4
-rw-r--r--sitemodules/profiles/manifests/icinga2_master.pp73
-rw-r--r--sitemodules/profiles/manifests/x509cert_common.pp2
-rwxr-xr-xsitemodules/profiles/templates/base/update-crls.epp160
-rw-r--r--sitemodules/profiles/templates/gitea/app.ini.epp6
-rw-r--r--sitemodules/profiles/templates/squid/squid.conf.epp1
-rw-r--r--sitemodules/roles/manifests/authserver.pp29
-rw-r--r--sitemodules/roles/manifests/idp.pp29
39 files changed, 1858 insertions, 1508 deletions
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..c7b0512
--- /dev/null
+++ b/README.md
@@ -0,0 +1,20 @@
+# CAcert Puppet
+
+This repository contains Puppet code (manifests, templates, files, configuration data) to configure the
+[CAcert infrastructure systems](https://infradocs.cacert.org).
+
+The private key used to decrypt the Hiera data in [the hierdata subdirectory](hieradata) is stored on the
+[Puppet server](https://infradocs.cacert.org/systems/puppet.html) in
+`/etc/puppetlabs/code/environments/production/keys`
+
+All future infrastructure changes should be made via this repository.
+
+## Why Puppet?
+
+We use [Puppet](https://puppet.com/docs/puppet/6/puppet_index.html) with
+[Hiera](https://puppet.com/docs/puppet/6/hiera.html) in combination with
+[PuppetDB](https://puppet.com/docs/puppet/6/puppetdb_overview.html) to have a proper audit trail for changes to our
+infrastructure systems.
+
+Alternatives like Ansible might be easier to learn, but do not provide the desired audit trail without more custom
+tooling.
diff --git a/hieradata/common.yaml b/hieradata/common.yaml
index e18ffc8..10d1188 100644
--- a/hieradata/common.yaml
+++ b/hieradata/common.yaml
@@ -12,16 +12,13 @@ profiles::base::users:
shell: /bin/zsh
password: ENC[PKCS7,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]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-rsa
key: ENC[PKCS7,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]
- -
- name: edgepolster
+ - name: edgepolster
type: ssh-rsa
key: ENC[PKCS7,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]
- -
- name: nitrokey
+ - name: nitrokey
type: ssh-rsa
key: ENC[PKCS7,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]
law:
@@ -31,8 +28,7 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,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]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-rsa
key: ENC[PKCS7,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]
dirk:
@@ -42,12 +38,10 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,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]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-ed25519
key: ENC[PKCS7,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]
- -
- name: rsa4096
+ - name: rsa4096
type: ssh-rsa
key: ENC[PKCS7,MIIEPQYJKoZIhvcNAQcDoIIELjCCBCoCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAVVW+UX1MlJfQAu0EytjbPohPycgvDmzDMuxeTMnYxPVdVUPRIiT8zcWVBrym9ar+n01b3x/eAy8mjQF8n94xJDSvpWI/hLVDQJtDW+MrsMCnoAhcnVlb1E8cCH5b4Lflnk+JklcVxYFIxSurlqHrbKdWXAFw6DfniMsr64LyaYuRHun47RY/qfed9sLzwnqJQiZ8oGPbekTEJVbNDzvfopnCHzAdH+cYCI6y5IawTxZFQr8VAtaxvklbKOqaC4KtH2tOp/wYB+6IBYzQaqO+L2eM3+9p2flPtEERZ9Eq0Y9lDWRjkHXFKdOgXPjqRnqlKEcQ4cro+iX1dWUlAkV5ETCCAv4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEGRQx04BZuJ6kRvYwv1IRAiAggLQH24aFiONst/QRk2UM0nQDTEDwpT1I/n3e2Y4nHbT/HFDaiIT2176Lk8sG2WCNUkVGYcSrfiKGthM846Wp9C4xijQSxDtthcicDHOP0knv8hc1Cf1Z9tqLHBApJyj2yeGtaq6UoJMJSVXfTYCZczPxifJ/RHY9hHsWSBTclVLfhkCYrJo3GfFXnXFgWx7T052fldZ0cU7ywQ1NF7eB8c9CQyBSqZb1kDGfEESmOFGcRlf375llToRMkqcAQzlDxcedvDYfWLBCYg+5ztIlUY5OzpWFWvIkKLPeE1YwYzW+9THYRmIQcZ3j975/cwk2af+0hCRsm3dnXKrf/ocfMXr5hI3SAupsneSTt5mLdd7CJQwt5XEeKtPlT13hx5LIy7xbrnladTUIvRT84MA/FLwXEcxNzuaCcHeqs06vrLl5LM6N+DIwRkM1yXciHL2giTwvYqnTjeNv4yO2p7IF8Ilb3PjVvQbjHiEr8UGJJEKoMRJo7mWZKoZ13JSg7ICvG03QaFbvrFks3clGJFBlfJu2ihvuC0y3sixF3OV147ae7sb0OAvyMz4sagQjS5CTrq6kiQwL6m8VRXLYgANxEgABGc/aG73b1RcgDHiea3uRzqsN5oKr/P0HNFziX/WwD5YnfenyZhjHL69O22YwDo+UuJkh3XHLNkPBfT9/hNfza96JrV/n7vlloJMEphfH8BplUo4Na+FmUH6cn9vtucKkfTOQxzuBN++39a0xQ5pIaBDDyZbxnQ/3YpXv0IoQp0OgQs8kWsUsi2ejeVHdDxy7h9CaDpuvie9zETKIUMHXqFQt4HDfIUbsy6ksLyKCYPxSMAEUQyWH3YXQTCRqph817kphAP+sxSoWF07j38MwDohJjdBrWTGnwLwQb3mBD/eSq1m7hKj26cxaxMc7Z7QyH7k6uT0eYh605cdOOt5PrPctiDtoRnwyRDO+g18Acbn]
wytze:
@@ -57,8 +51,7 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,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]
ssh_keys:
- -
- name: default
+ - name: default
type: ecdsa-sha2-nistp521
key: ENC[PKCS7,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]
mendel:
@@ -68,8 +61,7 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEACWHkaPgSf9C6TkccvR6cVQQH/mrevLhraJ1A575kPe/BG9YmsOj+OpJgm1JQlsHYhFb+7JTuljOLZ8CC2DvYN0zaVuGExAXFUPVl1nr7zn3nifeuFpDR9wgF/eC1g4SkCDaHw1eoapimIZK9RsgEgmrLH4PjB5Au4c3T6o5OfWkg9d6N0z/nofTZsjUg6706g86BR0phR+M1QST36DM4g57IhRxYz6lN1xD2QRHrSIRihaQM5pgQGTrEHWRsQLrbwiuhJImM17wZxuK2JW4xHygRCZ1JA860wDLsgmGFLM0u6f5/CR5E7gn42tvReXcNHKXP3iqwDJSDZJh1n5hDvTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBD7FqrizPCAMRBsMsgZ8EH2gDDav/JGDUh1DYOI2bcxioooadi3gUUc9eRT2W93Rbmvs2W0fA+DLnelcexbcCJDtuk=]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-dss
key: ENC[PKCS7,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]
neo:
@@ -79,8 +71,7 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,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]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-rsa
key: ENC[PKCS7,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]
ted:
@@ -90,8 +81,7 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,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]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-rsa
key: ENC[PKCS7,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]
gukk:
@@ -101,8 +91,7 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,MIIB2gYJKoZIhvcNAQcDoIIByzCCAccCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAC6SlsNj2tVo7putSVv0hWfks5Ysq1PyDkUefBgqU+hoBY+yw9vaLYGX4Qy+EdXokVtwdfMF5YyKY5K0wPkesd6hmFgONOd0vDv3PSuklsYjqVWuxujxBya4eu7OYacpP0nebj7glrnsgL1NyfFfsKj7Qyc33edPa/dvbhqFh3xDhWPYKwOORBaOJkwiOjtVsYdgAxLrv1PKAP2u07FerL7GZS8n9QOhtkjWQDXtjTD8+j9IPuX71HiqqKgIVF95T4tbsnVpZe3b3mGMAhS2c697KFEbHJOUNWA0kJDqRfax2a7DkXmZOo81uX2CadgqRUQlvN/jaYqsKlQ6P4LOCNjCBnAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBKgQQALYIJOAshKsMxVRqQz18/oBw8yFt06YKCma9WnX/hTsw/eVKS3mDA+k19DXxCKqqes3tFXypKdFrEn6s5kUY+GUaauM0h9OLsMSPLXUb7sD+iKcPV53Xpchg5KnvSZ636bwhbg1WPORViuvS2QBPDvIavFy+AcLgnPWjwrUVtT1gww==]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-rsa
key: ENC[PKCS7,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]
jselzer:
@@ -112,8 +101,7 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,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]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-rsa
key: ENC[PKCS7,MIIC7QYJKoZIhvcNAQcDoIIC3jCCAtoCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEATqNWmia/zJzSs8lOUE7i+k/IunDDW7Uq5mRrvUshtp1hmkDCF/ZjB92oKOKTnp3ufG7BXqLsjPEFj+d1lqP477q2vO4EDUt/k6fGj+gWoaLAXdUJJwQ8QB7JLyUzc1qF0h2rPJrIZX7rI2xFuq52QGHCsPXX1iiz6gxxzvkDaZPWhuLmIXFzznsEYDixYngSuDSBqZQl2u6rN9VlRFxaMcVtMGWS2uZeUJaUV2rDPBbLgPCOjEx5T8Cw6t0aB95Mmfhno71sXMAhrV/OpeSuBHvxYz+oitp2I6/+M3CPWeys2F9EO/swNf247R5rnDxm2ssXURCdnC2CyT/E6p0WOzCCAa4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEELFCkD35HEdhC4+e131T/zWAggGAq7JO6RPPBYsXNrrdfJxXkbcXllJ1nqRroEUl02bXnovmBKpiAN+77kS+Q8nObKjc7BHWdeVULXMNvKXU863z8fWIVHuAN3P4DEBed+Ap4P5o6yXxa8LM/OokUrgseDblIUy7y+z+umMB0KyhJNGGGhTvEsC+V4o/XrBTJfreI9BL0u1g5JTIUPxHihnvGz0SXa/HTuHZqXY4OSBTGZuiZZMnTDr++6Waut1GOX9uSw+f/mThiEpqC3jlgVTXP7S95UVppdJtgFyQ0rAtTw27d5TQDwcWl8yxTsc/x7CAperEiO//oHH0LSo41LGFiWrjz7pgAYJjqmfebO4MZKPE44yUjC2PKly07EL9CwHphNcgsUJ/RBJWtDCfY5y4hCClT8d9FFBHYnZwTL2VcD6VHlGUYQAyZ4R1+Eth9ur+s2DI4JE9kT9Uqyzl+OaujYDRCEbmzqhSrOgTPZL1v6LzUt33SaqKx0wYtwY4C71H4jyl3hB6GxbHipHVhPErswqC]
markus:
@@ -123,8 +111,7 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,MIIB2gYJKoZIhvcNAQcDoIIByzCCAccCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAf1D2y9Jud0jUMfzexWvbbA6m/pqKrLe50i3QKLlacrQwLjtj/Ioe/9hvzSQJLfr2BrZ+C5eFvB2u7YdGOT8nYasEpPcBP7wrZm+VRE2VaR85ATmcHsrYex8P5o7abifc3nVfRXlHoSfAD5epwzKYCgj6T8G5aBZV+EL5PiykQsNVuaCBat/RzXBOX/mxSbiVQDTF9QezOFE3CqdWWoYzSh9r0t6bPq2EFG3iQw/nefvLHdVrEUdnJHPfHp7grdYWLr9x1RDxPwueUb7oGHbxxQ8jYes6EyVaWlGB7PXg6CPhMC3jU+s2MfAdU+eELBtRxTE0PStvZqjU9vG+EKFkYDCBnAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBKgQQ6NCtegYWJCLh6BJXW0JZ/IBwuJgJdjSmBjVnZpG3v6/d/f/cLE65/P9e/NcESg7LEwKgJ5m1/2ZCrepC/UfITf5Z+M6c9AAVczRD79gXhF/aIsFHgwlFIfTN6maTM3mRzQH8q2hjx8GGqc3MbKv3Ei70+eaG2YubCWwOP5Ao34eVQg==]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-rsa
key: ENC[PKCS7,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]
bpschuck:
@@ -134,8 +121,7 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,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]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-ed25519
key: ENC[PKCS7,MIIBuQYJKoZIhvcNAQcDoIIBqjCCAaYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAsW4Nf4FQVcQAcctcyrK63zN03nEuPt3duCquRcPdsklVrrSyJW84niPuLtXRANnfduAvMuyFbUdPywudjX5Efu2JsDC4olJgZB8LCufJGnY782tzCzV/VXaYPbv45C2OMpLSHCYeWkLxKgyjfLwlcKfOXH7PrWVL48Ap0cTfP/abhjw3RB+6KnTYWPaWAWsHqdmYhGX3KqdSPp5cCUpAKDGcXarXiLT/LEJhHHUbPjQQErqWSov0PSymyX4lH8JVQxncnz0wMQvgPqtrpWxj6V81+1+JjCOJrXzNqDQy3AseiPEdPuvm6iJJG1o+kjY6cWsJEP1HbunUup80n55nyDB8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDh8P2WxKpOZRP+/k12L0iNgFBteIoPMwyDEcs8WiJhB5AeU1Yf5jeISbF+vWgdDn42wmn/EmqET7MPbBSk/OGltguaIhGEOL2/a6ubwV0ZJxu45i42zX+ug/AGJmrcPMcmCg==]
davevdm:
@@ -145,8 +131,7 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,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]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-rsa
key: ENC[PKCS7,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]
dinoex:
@@ -156,8 +141,7 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,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]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-ed25519
key: ENC[PKCS7,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]
edkapite:
@@ -167,8 +151,7 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,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]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-rsa
key: ENC[PKCS7,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]
mish:
@@ -178,8 +161,7 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,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]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-ed25519
key: ENC[PKCS7,MIIBuQYJKoZIhvcNAQcDoIIBqjCCAaYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAX8bFst3ZPRVLttBBl1rD1rrjeyC0pHFYd6RbezfauA3LhecNGyxlpGS1ivcl3+HPfPgSqnkFkOnVZaRE8+TmWtBCPPB4zpVFVVJm2tpsj0vH0fmUBasjkW5NPk9krf8I0l8n/zs32W41XURmwvlEsB+VNZ3ttRsEpVNflEzIGGzSRTq/iI2KYV1jjKsV6ns/KBB3b/GPZr0lJ23xojfJtEyCJReLsSbljeZY2a3kuqD1vFiWpD7B5fNY4JSXPaMxkhUkWCX1RUsjJm/dSnMLOZK5GOIoDkYipt4XCst49QWNl+/r6vkBngM6sbQES9dkY3/r+KR0Wt03DUA5U5xmezB8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDrw85SmW6AK2vuGp1TP21kgFCYO/l/FrI5fZizRwZyp9U2uNvDVcG0/JDKoZKflY+AtDtw3mjEk1LngRX8QdrpO11MGImz6qhxTAgRY58rG6kXzZIHYok9mrPcsLY3a5mB+w==]
sat:
@@ -189,8 +171,7 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,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]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-ed25519
key: ENC[PKCS7,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]
waclav:
@@ -200,10 +181,19 @@ profiles::base::users:
shell: /bin/bash
password: ENC[PKCS7,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]
ssh_keys:
- -
- name: default
+ - name: default
type: ssh-rsa
key: ENC[PKCS7,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]
+ kim:
+ username: kim
+ fullname: Kim Nilsson
+ uid: 1017
+ shell: /bin/bash
+ password: ENC[PKCS7,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]
+ ssh_keys:
+ - name: default
+ type: ssh-rsa
+ key: ENC[PKCS7,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]
profiles::nrpe_agent::allowed_hosts:
- 172.16.2.18
@@ -211,46 +201,46 @@ profiles::nrpe_agent::allowed_hosts:
profiles::icinga2_agent::pki_api_user: client-pki-ticket
profiles::icinga2_agent::pki_api_password: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAjrore6zK7GJXbP9FZ6ORUWvpt7FS2fXHiwB+
- ocTcmP7F8SnyCjYZ/a6S7eXPJVffZ6pZazozfUmW6HXOVFcSrZZdccEcZbFt
- ZnQb9tp63BCHHGwqI/oj0jVdInaTXE1i4yQTjev/twzblmHIrEndfZnZzyAd
- 61cnYuv8og5p5pccGYYoXBcPcguB9KtspfYL/eEwD4xNvqF/QlkAEXKZ5o39
- p9j24ao57Iwzy4o/dgI+MOr9NIMEtmXoIb3Ake3J7CaN26IuP22MTivFWf5p
- 1vlMA69snYOifTKIw76eNACYCz+KA87dWDNEsR2OtCCbQ2EA1nrAXTdlYWdE
- RmIpGTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAAs0An2QOnxac51GTU
- gCG3gDAX0FOzW/oWi8c1PDIFb+0B4cTQRi9gP2fzugKu0bp0FBB7akZV6Zx0
- T5GP0WQAzU0=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAjrore6zK7GJXbP9FZ6ORUWvpt7FS2fXHiwB+
+ ocTcmP7F8SnyCjYZ/a6S7eXPJVffZ6pZazozfUmW6HXOVFcSrZZdccEcZbFt
+ ZnQb9tp63BCHHGwqI/oj0jVdInaTXE1i4yQTjev/twzblmHIrEndfZnZzyAd
+ 61cnYuv8og5p5pccGYYoXBcPcguB9KtspfYL/eEwD4xNvqF/QlkAEXKZ5o39
+ p9j24ao57Iwzy4o/dgI+MOr9NIMEtmXoIb3Ake3J7CaN26IuP22MTivFWf5p
+ 1vlMA69snYOifTKIw76eNACYCz+KA87dWDNEsR2OtCCbQ2EA1nrAXTdlYWdE
+ RmIpGTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAAs0An2QOnxac51GTU
+ gCG3gDAX0FOzW/oWi8c1PDIFb+0B4cTQRi9gP2fzugKu0bp0FBB7akZV6Zx0
+ T5GP0WQAzU0=]
profiles::icinga2_agent::master_host: monitor.infra.cacert.org
profiles::icinga2_agent::master_certificate: |
- -----BEGIN CERTIFICATE-----
- MIIE+jCCAuKgAwIBAgIUakjWIH5VKmS7yZycSG7EzfIYWkswDQYJKoZIhvcNAQEL
- BQAwFDESMBAGA1UEAwwJSWNpbmdhIENBMB4XDTE5MDcyMTE0MDYwMFoXDTM0MDcx
- NzE0MDYwMFowIzEhMB8GA1UEAwwYbW9uaXRvci5pbmZyYS5jYWNlcnQub3JnMIIC
- IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArjQIqs6zXncatT2luZImFAkx
- XwUnApePQvxJ98cAyirNR6Ugh95syo9BP9PJvIojjxtuPK5FzZmLi3c5UO3ly72Q
- Yxho/yZ/qLllmluhreiMAcofDdwyo9X9kAfexjeztopdY2flBT7LpQ7txuOgK91p
- WmI2uH5Htjwtbumh4E2UO9NkenFpNpUVg58mBNZpnNDApYacj2zz1v2WBFgaM1/3
- UABD+HicNd/aS1ji6eMOglgq5arYrfKZxpe2GgVZ50xfvWrIfg/C7HvU+GyghS7f
- XgpyzjLQoR9gS4aAPIvb45hG4p2u3Fx14PR3IynYtaZV3KSh5RNKBkQSlu9hmVRS
- y8aR5DqneDmTVX944lvlr1+x8+Xy37DZH9+6Bq0mBrnnlEc5y7ybcreuUm1Vx30l
- /iZfnt8uwC1SyB2J3ZbtXK9vIPHG097rLl0l+Rw8eaObaWl8rn4PVjdAUaFI+q2B
- hep8b4gfyF393Ih54OTYCI5QyEbBPP7syTCSgrWDUUnLv/ar2AvXTfzzydqmcKsz
- Yliok3iZfjf61TETTpBjqkKHTpS+mE55L2DSS0R1X0JTbjwmkvANYQ80emKk49Xa
- k7IqYJYT8+h2wDYambcTR+rhBV7c6QBS+phCPqO+7miYdyDeZCvPtQcO3lxMEnVv
- y2nh6+8BvEveNfdTNOUCAwEAAaM1MDMwDAYDVR0TAQH/BAIwADAjBgNVHREEHDAa
- ghhtb25pdG9yLmluZnJhLmNhY2VydC5vcmcwDQYJKoZIhvcNAQELBQADggIBADGz
- W4rXl1xK5qNHRWVy6wqH8/2OkZCg1O8X1b3mEnYYXyXRB8L6OKDUDfNZaldACegT
- aEmEzBL27+/7wW6SymWoL74ni9WOZPqJ3GsWtHDUWSsolvQWHmYFnIGTOm+8PsVw
- L3X2ftPg1krXhTWevK4rZdLNh4KM4Gr6nFHxiuxiOV22xqLSaFh/rVd0TNlpgCIZ
- oWOsKYrqx4Hudq4blDI0w0NLySgOVEgl1EJA/vED1DzOFmbmuvujODUhjm5sVvuN
- x9Zm4G0KuZX7LgKc6VeGnAyAUzgrD/uhZvc3oAzmfUUC3dx7tWB7WUuI9ji9bL8v
- 94oXsQ7Ig329RdSsE3AoH6w54cVgCEo3WZ7j7z+ejPPLI9DbvFFwM/JFEO+A1cPw
- EEUG8bSHHo8Twe5tgTwr0t1Sch3D5Ur7qv0nBAjwphEVoIGiu5yudmFbscPgTz+i
- /NPtJ1zZ2NCjLabeXmaSq8Zxy4dCJ0YJ6fuFz2SKd92RDO4okhDbRgnW1RT1+eAT
- 2dNvOd3V878PS7BM3OAzZTfVnVD+/DTRyUHAz07iSB/1KNfEfn3qDSTapx9PL4aJ
- X74w5WZ7FlNdQHRFvvjNI849fVb2MoLxeIwd7W5flv6gpLlMX49PMp62ZtfupbRJ
- 5AtYgSC6FbF3WwkRKTz2/KZi5j0oCHqxl31HY1Hx
- -----END CERTIFICATE-----
+ -----BEGIN CERTIFICATE-----
+ MIIE+jCCAuKgAwIBAgIUakjWIH5VKmS7yZycSG7EzfIYWkswDQYJKoZIhvcNAQEL
+ BQAwFDESMBAGA1UEAwwJSWNpbmdhIENBMB4XDTE5MDcyMTE0MDYwMFoXDTM0MDcx
+ NzE0MDYwMFowIzEhMB8GA1UEAwwYbW9uaXRvci5pbmZyYS5jYWNlcnQub3JnMIIC
+ IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArjQIqs6zXncatT2luZImFAkx
+ XwUnApePQvxJ98cAyirNR6Ugh95syo9BP9PJvIojjxtuPK5FzZmLi3c5UO3ly72Q
+ Yxho/yZ/qLllmluhreiMAcofDdwyo9X9kAfexjeztopdY2flBT7LpQ7txuOgK91p
+ WmI2uH5Htjwtbumh4E2UO9NkenFpNpUVg58mBNZpnNDApYacj2zz1v2WBFgaM1/3
+ UABD+HicNd/aS1ji6eMOglgq5arYrfKZxpe2GgVZ50xfvWrIfg/C7HvU+GyghS7f
+ XgpyzjLQoR9gS4aAPIvb45hG4p2u3Fx14PR3IynYtaZV3KSh5RNKBkQSlu9hmVRS
+ y8aR5DqneDmTVX944lvlr1+x8+Xy37DZH9+6Bq0mBrnnlEc5y7ybcreuUm1Vx30l
+ /iZfnt8uwC1SyB2J3ZbtXK9vIPHG097rLl0l+Rw8eaObaWl8rn4PVjdAUaFI+q2B
+ hep8b4gfyF393Ih54OTYCI5QyEbBPP7syTCSgrWDUUnLv/ar2AvXTfzzydqmcKsz
+ Yliok3iZfjf61TETTpBjqkKHTpS+mE55L2DSS0R1X0JTbjwmkvANYQ80emKk49Xa
+ k7IqYJYT8+h2wDYambcTR+rhBV7c6QBS+phCPqO+7miYdyDeZCvPtQcO3lxMEnVv
+ y2nh6+8BvEveNfdTNOUCAwEAAaM1MDMwDAYDVR0TAQH/BAIwADAjBgNVHREEHDAa
+ ghhtb25pdG9yLmluZnJhLmNhY2VydC5vcmcwDQYJKoZIhvcNAQELBQADggIBADGz
+ W4rXl1xK5qNHRWVy6wqH8/2OkZCg1O8X1b3mEnYYXyXRB8L6OKDUDfNZaldACegT
+ aEmEzBL27+/7wW6SymWoL74ni9WOZPqJ3GsWtHDUWSsolvQWHmYFnIGTOm+8PsVw
+ L3X2ftPg1krXhTWevK4rZdLNh4KM4Gr6nFHxiuxiOV22xqLSaFh/rVd0TNlpgCIZ
+ oWOsKYrqx4Hudq4blDI0w0NLySgOVEgl1EJA/vED1DzOFmbmuvujODUhjm5sVvuN
+ x9Zm4G0KuZX7LgKc6VeGnAyAUzgrD/uhZvc3oAzmfUUC3dx7tWB7WUuI9ji9bL8v
+ 94oXsQ7Ig329RdSsE3AoH6w54cVgCEo3WZ7j7z+ejPPLI9DbvFFwM/JFEO+A1cPw
+ EEUG8bSHHo8Twe5tgTwr0t1Sch3D5Ur7qv0nBAjwphEVoIGiu5yudmFbscPgTz+i
+ /NPtJ1zZ2NCjLabeXmaSq8Zxy4dCJ0YJ6fuFz2SKd92RDO4okhDbRgnW1RT1+eAT
+ 2dNvOd3V878PS7BM3OAzZTfVnVD+/DTRyUHAz07iSB/1KNfEfn3qDSTapx9PL4aJ
+ X74w5WZ7FlNdQHRFvvjNI849fVb2MoLxeIwd7W5flv6gpLlMX49PMp62ZtfupbRJ
+ 5AtYgSC6FbF3WwkRKTz2/KZi5j0oCHqxl31HY1Hx
+ -----END CERTIFICATE-----
profiles::lxc_host::dns_forward_servers:
- 10.0.0.1
diff --git a/hieradata/nodes/authserver.yaml b/hieradata/nodes/authserver.yaml
new file mode 100644
index 0000000..3cba665
--- /dev/null
+++ b/hieradata/nodes/authserver.yaml
@@ -0,0 +1,16 @@
+---
+classes:
+ - roles::authserver
+profiles::base::admins:
+ - jandd
+profiles::icinga2_agent::pki_ticket: >
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBAD
+ AFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAMuwyVWL3VEdgAS5HvM+RltOUGC
+ hPe27Eahu1zUxp7f48aJ/VOsmgHm8F1YftyC1AndzrJ8T84Lm6Ur/NZ2RkoV
+ ZUhEGf6r2eYb51NejOwCaZOvVODXfl0dqhUloU3Ro1PtH8uAsaYdouYdpnqD
+ bIjDpornfsT4T7djqYOfchUbXM7A3u7pPRpukpUHFiPeAb/nRHvKH/xJvWXG
+ 7BzehEJNGERQ5DERTJ83Y4yjZ3V4mtTbMk5GpZ3SgHtui5XigCSJoeyhcX5o
+ Z/zBH1fRe7iO0f1QCIR1gZEB4T54KXGFy4WXEUuulBO8h0BdkM2aGQ+Cgw0X
+ L0YPzwDKzt4kSl4DBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDIBlhjSM
+ DvwLO0SRosvFN9gDD+lGsBsFLvo8ll60Nl5FxYEW160kr+PTvxBCu/2R435b
+ IRkWxuqR7qkTpqnVizUao=]
diff --git a/hieradata/nodes/blog.yaml b/hieradata/nodes/blog.yaml
index 6eb0a29..5cf35cd 100644
--- a/hieradata/nodes/blog.yaml
+++ b/hieradata/nodes/blog.yaml
@@ -6,16 +6,16 @@ profiles::base::admins:
- jandd
- law
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAQsBoiVwx9vmrYDxh7YuvesnlK8zu9EZ51RIV
- RbGlw6iUQa+93uIv4v8dsdBTuRzaMs9TDm+zYtg8rjv+yvBxXNLTvPGywQLk
- QmnN285KQZxLYjEMYIhskEmqYiCRa3yizJsHPHdnDfo+ddkeOBA6ggfeV+q6
- nTKO4E3xhqzhf9nM1dH7wmEtQGwUf1w19DCuXZJF6Umy6RqqR+TWJEyqLzdv
- /PLmK3uOzfEwqTbiD1kr83suFyksAeePQdgIzHRz+sCOdr866YpSHSUdJZgc
- ytNY054jmupwdqTfg/jYYtNWWToHbnyUBQuVMPVlNB3o2uDecSRkcRaQbyih
- 1PvtizBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAVe9rr+qrIzyMWNoyH
- rzk3gDAzQ3tgLcEabWZfImVtWIACq224h2PaVx/1YkZAVUH7YRbcvL81JJfJ
- wfhG6SBWM8U=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAQsBoiVwx9vmrYDxh7YuvesnlK8zu9EZ51RIV
+ RbGlw6iUQa+93uIv4v8dsdBTuRzaMs9TDm+zYtg8rjv+yvBxXNLTvPGywQLk
+ QmnN285KQZxLYjEMYIhskEmqYiCRa3yizJsHPHdnDfo+ddkeOBA6ggfeV+q6
+ nTKO4E3xhqzhf9nM1dH7wmEtQGwUf1w19DCuXZJF6Umy6RqqR+TWJEyqLzdv
+ /PLmK3uOzfEwqTbiD1kr83suFyksAeePQdgIzHRz+sCOdr866YpSHSUdJZgc
+ ytNY054jmupwdqTfg/jYYtNWWToHbnyUBQuVMPVlNB3o2uDecSRkcRaQbyih
+ 1PvtizBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAVe9rr+qrIzyMWNoyH
+ rzk3gDAzQ3tgLcEabWZfImVtWIACq224h2PaVx/1YkZAVUH7YRbcvL81JJfJ
+ wfhG6SBWM8U=]
profiles::x509cert_common::certificates:
'blog.cacert.org':
certificate: |
diff --git a/hieradata/nodes/bugs.yaml b/hieradata/nodes/bugs.yaml
index dac97c3..b5205af 100644
--- a/hieradata/nodes/bugs.yaml
+++ b/hieradata/nodes/bugs.yaml
@@ -6,16 +6,16 @@ profiles::base::admins:
- jandd
- law
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAcX6SwwACEzRwZbnDX9rUu2l1xWF3jJVi6Fon
- ZtUAkQs4w4GMdom+Ze2WsXpq623WD60csytV0PF6BvLPoBMec6f2kj2ZsbBz
- SzJ2/1QfpkG0qh+DS7MXN1wSBrJd2ERk99V792GAFHzq8juCbI+LdFJlv1/8
- PAehHgIqPTYRpkVdMX3QXbR6ulukgaKQ3rV3LUD9WeP3BHhGSPBOy/E278KH
- q5hXFeFgfBMiImPIdKeQn3aAwTVgAUArnhRR3dQLnL2pT+8qu9fca1Hhla/e
- Sn0m7FBbO344esxXgIzU4OAQOtcy28hdlBBDSW9bDW+IfTxIoxSHNNbM+X9l
- uOSdpDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBNp7E65UObjdMpvSNL
- cL0JgDDj8oGEHS/6EmlFUeFwv7h+2wC8/DEq6JwSysRtnP/tM2/KZ/e1rVeu
- K0oC5LKZf1I=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAcX6SwwACEzRwZbnDX9rUu2l1xWF3jJVi6Fon
+ ZtUAkQs4w4GMdom+Ze2WsXpq623WD60csytV0PF6BvLPoBMec6f2kj2ZsbBz
+ SzJ2/1QfpkG0qh+DS7MXN1wSBrJd2ERk99V792GAFHzq8juCbI+LdFJlv1/8
+ PAehHgIqPTYRpkVdMX3QXbR6ulukgaKQ3rV3LUD9WeP3BHhGSPBOy/E278KH
+ q5hXFeFgfBMiImPIdKeQn3aAwTVgAUArnhRR3dQLnL2pT+8qu9fca1Hhla/e
+ Sn0m7FBbO344esxXgIzU4OAQOtcy28hdlBBDSW9bDW+IfTxIoxSHNNbM+X9l
+ uOSdpDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBNp7E65UObjdMpvSNL
+ cL0JgDDj8oGEHS/6EmlFUeFwv7h+2wC8/DEq6JwSysRtnP/tM2/KZ/e1rVeu
+ K0oC5LKZf1I=]
profiles::x509cert_common::certificates:
'bugs.cacert.org':
certificate: |
diff --git a/hieradata/nodes/code.yaml b/hieradata/nodes/code.yaml
index 9a66656..8cd41e4 100644
--- a/hieradata/nodes/code.yaml
+++ b/hieradata/nodes/code.yaml
@@ -4,27 +4,27 @@ classes:
profiles::base::admins:
- jandd
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAoMdZhzR3jM//UzdXm+QgMu6B5vTRbXq9uEgB
- JG4UzGaARRdOVSWDr0YIJeRwA92CQRygUAcbA8kw+XJxUD7UM2q9tQnRkkzp
- 9ad+s40TPFrEtgwepWW/rE+ikzxKlic2MMcvreQcvhuQAYnqQa7/KPjXf5GW
- W4gknLbfn09mF/dlVM4vDEyAbEAdDpf/8UnbFJLE/EG/dKDbbb+8l/6C2On+
- BGXrME6GUDn2gigCD3+35zL0+VxNXx6A5hagCbLu7sIifQHNn4mP+ObMGj0Q
- 3wx8BH4IxS02tqpmQDB9EQNrUeb3y6vj8086ePRn/NTmPC0jNP+I02KLjXsV
- MUwAcTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBD631O2gRFwtbgb07le
- VlHOgDC6DqTry9yMR/tY73SZ/vNpwQbNNpb1QgSgNY/Xput/Rby+NuJTXkzQ
- AafGS1+vajg=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAoMdZhzR3jM//UzdXm+QgMu6B5vTRbXq9uEgB
+ JG4UzGaARRdOVSWDr0YIJeRwA92CQRygUAcbA8kw+XJxUD7UM2q9tQnRkkzp
+ 9ad+s40TPFrEtgwepWW/rE+ikzxKlic2MMcvreQcvhuQAYnqQa7/KPjXf5GW
+ W4gknLbfn09mF/dlVM4vDEyAbEAdDpf/8UnbFJLE/EG/dKDbbb+8l/6C2On+
+ BGXrME6GUDn2gigCD3+35zL0+VxNXx6A5hagCbLu7sIifQHNn4mP+ObMGj0Q
+ 3wx8BH4IxS02tqpmQDB9EQNrUeb3y6vj8086ePRn/NTmPC0jNP+I02KLjXsV
+ MUwAcTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBD631O2gRFwtbgb07le
+ VlHOgDC6DqTry9yMR/tY73SZ/vNpwQbNNpb1QgSgNY/Xput/Rby+NuJTXkzQ
+ AafGS1+vajg=]
profiles::gitea::database_password: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEABIkX+98o3ENPVjgdKapXDgK+YIkG8LrCB1JZ
- zB4dAFLE3Q/DHl6v3pZ2VLU/F2urpk1kgclgz5wyKJkWSJp3LtRpFzc5emlY
- 4bnTc4JLODQV20IWRvnc7U4fcAjnYfqflc+cmRooptZYEvR0sz3Zejj3zA7h
- irH5XJvrPinJvKRD8LaSaH1kDSX+gGRXbm6JLH/tsu0ZsmVjJFGfTGmcvjhn
- nCU+vAwv6iv5JxbOX75V085OlnZEJJbZK7EuUck9qFSU6RSB7Ui5480i5Kq3
- lbuDK19nak+VemMXorhg+f+MIYnb2Wmf+EOvuMuuiQHaJBBdPGeOlZA0UO5I
- 1+iZNTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAppQlAjbnsuArVa3CI
- BqXcgDDiZCLodsKzhP1PKv2vmDdl0HrnWRz41QxrjHE2gJKX4oAFU4wpi3lE
- DK06TozeLsg=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEABIkX+98o3ENPVjgdKapXDgK+YIkG8LrCB1JZ
+ zB4dAFLE3Q/DHl6v3pZ2VLU/F2urpk1kgclgz5wyKJkWSJp3LtRpFzc5emlY
+ 4bnTc4JLODQV20IWRvnc7U4fcAjnYfqflc+cmRooptZYEvR0sz3Zejj3zA7h
+ irH5XJvrPinJvKRD8LaSaH1kDSX+gGRXbm6JLH/tsu0ZsmVjJFGfTGmcvjhn
+ nCU+vAwv6iv5JxbOX75V085OlnZEJJbZK7EuUck9qFSU6RSB7Ui5480i5Kq3
+ lbuDK19nak+VemMXorhg+f+MIYnb2Wmf+EOvuMuuiQHaJBBdPGeOlZA0UO5I
+ 1+iZNTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAppQlAjbnsuArVa3CI
+ BqXcgDDiZCLodsKzhP1PKv2vmDdl0HrnWRz41QxrjHE2gJKX4oAFU4wpi3lE
+ DK06TozeLsg=]
profiles::x509cert_common::certificates:
'code.cacert.org':
certificate: |
diff --git a/hieradata/nodes/community.yaml b/hieradata/nodes/community.yaml
index ad992f9..1f18b4c 100644
--- a/hieradata/nodes/community.yaml
+++ b/hieradata/nodes/community.yaml
@@ -7,37 +7,37 @@ profiles::base::admins:
- jselzer
- dirk
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEARHUYarivf3GhHB+uKLA9AD0uCJJqBJjzt3+N
- wreJZ79ehkkb1LIU720ipwRPTtP+a6Gjx1rfQJO8YwB1ZwDeB7aYc+1ZHcVF
- kAHOu5WkonpGCDMHfTJu3NUAa1O9qla8W4cdyLh/n7wJS3hqFJrDa0SxdlLN
- xvsqxNtrEjWa9ADiC+Tbt6IWGkLKZrs/T0C3zPMUc3lTXSyWDDFPPaAUj1Sk
- 9OhOw00j+3BcYSIb0J8h92dNohLS5saGXMf+mwqt2FZWDyJ8YbzJCItmhhMH
- S/Bmsc4dsT5VPgFew/5FOrR5/8whEu9gUFcP8FbLGEXtClUylWhAf6aK6cxM
- 2Yt+/jBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBv/L7t0DBN3lDygcWV
- AAa/gDAEkxZMiQL9ZuZ6KaLVzv3FNr+ACIvytNoi9JxLTX/PTpygEmRb35Fq
- xS+ioIVEWOE=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEARHUYarivf3GhHB+uKLA9AD0uCJJqBJjzt3+N
+ wreJZ79ehkkb1LIU720ipwRPTtP+a6Gjx1rfQJO8YwB1ZwDeB7aYc+1ZHcVF
+ kAHOu5WkonpGCDMHfTJu3NUAa1O9qla8W4cdyLh/n7wJS3hqFJrDa0SxdlLN
+ xvsqxNtrEjWa9ADiC+Tbt6IWGkLKZrs/T0C3zPMUc3lTXSyWDDFPPaAUj1Sk
+ 9OhOw00j+3BcYSIb0J8h92dNohLS5saGXMf+mwqt2FZWDyJ8YbzJCItmhhMH
+ S/Bmsc4dsT5VPgFew/5FOrR5/8whEu9gUFcP8FbLGEXtClUylWhAf6aK6cxM
+ 2Yt+/jBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBv/L7t0DBN3lDygcWV
+ AAa/gDAEkxZMiQL9ZuZ6KaLVzv3FNr+ACIvytNoi9JxLTX/PTpygEmRb35Fq
+ xS+ioIVEWOE=]
profiles::roundcube::des_key: >
- ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAqwu823+svisLj+8LxOGHbb05s1tIFsraXWH/
- SDnuK8//+6q37kjoAvySC9uCbaRpB9dWfU9E46BUVAYg703LC/JMEeS5UfXK
- v/44BFSGlzXjbQkM0tdfNY2DCk3AWcPAds+6SfReS3vBqXt1l3Sas5hSm17t
- 1zkELEsacMQ/+5a7MNWSUVfJbA51rdQUmrP88Pu+CfzlqduupNJVvgzI6xUz
- C29+DJ866sevd90ByCtRgLzCkGVe5GFYjXi3VOHUF3yRmsmoHtP+bTsxmN42
- +oU91+xXa0LzSp/dCt9LYMpUi1WXl4k8AXU6AqZMo7uYJvHH0p79ugYP4Xkr
- fAE/ADBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAnr12/n/QLzDyVRxaW
- DaGygCDPJqWrEVXRR79E5Uu+jqPezAEMdYrzSCJDYFiS2cRgUQ==]
+ ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAqwu823+svisLj+8LxOGHbb05s1tIFsraXWH/
+ SDnuK8//+6q37kjoAvySC9uCbaRpB9dWfU9E46BUVAYg703LC/JMEeS5UfXK
+ v/44BFSGlzXjbQkM0tdfNY2DCk3AWcPAds+6SfReS3vBqXt1l3Sas5hSm17t
+ 1zkELEsacMQ/+5a7MNWSUVfJbA51rdQUmrP88Pu+CfzlqduupNJVvgzI6xUz
+ C29+DJ866sevd90ByCtRgLzCkGVe5GFYjXi3VOHUF3yRmsmoHtP+bTsxmN42
+ +oU91+xXa0LzSp/dCt9LYMpUi1WXl4k8AXU6AqZMo7uYJvHH0p79ugYP4Xkr
+ fAE/ADBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAnr12/n/QLzDyVRxaW
+ DaGygCDPJqWrEVXRR79E5Uu+jqPezAEMdYrzSCJDYFiS2cRgUQ==]
profiles::roundcube::master_password: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAQym6DCbBEdEaW6q4f4fKNhVt9iCdn8butbqV
- I3F5Br2b+68R/llQfA0MCBIKPWaF2vwUaUaJYow6uQ9KE96FLASVPCia0Tq7
- eKkvZOJ6AXCFhU2fj7IWdzmFGBHlU5j39OhRuk5k/vwn9dtn2korYhUfkhdd
- 93htnI7ts3uu13fsDqg8fKG8GGuRiesvOfcLgmR6N13S+INMnmm1yogzt/H8
- dP9Gmzh06H8LPLo09xkv7/VhqyyjGHFuqnpzEpEIiaI6yfpP2o0XxFVtIJ3d
- kieIXuWP6Cn30EhfTtJ4+MuS/r/jjLTjvuuy+FH4J3Jw6ruTQpWGkszHCKKZ
- qukXDDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBA45dXYksd5BAhgFD7
- 5NP+gDDvF8Cgnhpi/DhvI0fzwYJaLwelYhplqcWXJhml/58/yhYllUZVE/Cz
- smDHq+RA9UI=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAQym6DCbBEdEaW6q4f4fKNhVt9iCdn8butbqV
+ I3F5Br2b+68R/llQfA0MCBIKPWaF2vwUaUaJYow6uQ9KE96FLASVPCia0Tq7
+ eKkvZOJ6AXCFhU2fj7IWdzmFGBHlU5j39OhRuk5k/vwn9dtn2korYhUfkhdd
+ 93htnI7ts3uu13fsDqg8fKG8GGuRiesvOfcLgmR6N13S+INMnmm1yogzt/H8
+ dP9Gmzh06H8LPLo09xkv7/VhqyyjGHFuqnpzEpEIiaI6yfpP2o0XxFVtIJ3d
+ kieIXuWP6Cn30EhfTtJ4+MuS/r/jjLTjvuuy+FH4J3Jw6ruTQpWGkszHCKKZ
+ qukXDDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBA45dXYksd5BAhgFD7
+ 5NP+gDDvF8Cgnhpi/DhvI0fzwYJaLwelYhplqcWXJhml/58/yhYllUZVE/Cz
+ smDHq+RA9UI=]
profiles::cacert_selfservice::admin_emails:
- jselzer@cacert.org
- jandd@cacert.org
@@ -45,187 +45,187 @@ profiles::cacert_selfservice::admin_emails:
profiles::cacert_selfservice::api_endpoint_url: https://email.infra.cacert.org:9443/
profiles::cacert_selfservice::api_client_id: cac3ad11-fa50-43f6-8ded-15f598b6ca2a
profiles::cacert_selfservice::api_private_key: >
- ENC[PKCS7,MIICXAYJKoZIhvcNAQcDoIICTTCCAkkCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAwZixb5ZkBTfIjHnZjyg+bDOCsJZ46ATcle1j
- imfj5hph1wBK4ZpjuzLew1IPTJ+iY4redgwNGi0TgHcOmT9l2i2jnjITDKJt
- 7vfgLFKZJ8+whdEpejd8GVBXBgNe4vIt2YMMRnOGl7d9dS7+e4sm0lK56hSd
- fbHuu7h0gbSK+ZPbJvyPPI+r90j/qRq8SXrnJ8nT49NswHuj5PmMBdYMslSO
- PpnAoq+YyukeQ+HagWr3khcSZx+GYY14kBpBNiDZpG03NKzjZkT6fYugqHE0
- B9HC22XSKrwQJwIIbSpVRJ3UF2pcx0aWjMQfuvdteJyD9XkmeNa6uiQGl05G
- KJuqhDCCAR0GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEOsT67vXcPF/Pbqc
- j6x76aOAgfBjd1srdGK6PJUs5Inkop441ce2v3jij/1oo9fRswSTgAMGHSGg
- 4zqbuZH2eR9hUXd/Mn8DmrAF4O285K7J6ei+9Eqkyf4xoIGV0VT9OiXDbJ6K
- mUdm0gPYWdjYnN6FEIo2sLxBf6NDyRXFnjALnY6hfS8ePD4vRLHld3gDErdA
- QwVQDewb+L5H3mrTNnM/2ex9M1ekRXK3z0lfn4q1H7UUZLS6Y5vmH4Tl7kTk
- QeVCvUatI5fSzNaAi+N15nMo2X/ojgTn/CS9zklA5du1XgI1xzqsHyb7zirv
- Bq5sNCy9CM2at4UMKVqsU7FpdIIxjFw=]
+ ENC[PKCS7,MIICXAYJKoZIhvcNAQcDoIICTTCCAkkCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAwZixb5ZkBTfIjHnZjyg+bDOCsJZ46ATcle1j
+ imfj5hph1wBK4ZpjuzLew1IPTJ+iY4redgwNGi0TgHcOmT9l2i2jnjITDKJt
+ 7vfgLFKZJ8+whdEpejd8GVBXBgNe4vIt2YMMRnOGl7d9dS7+e4sm0lK56hSd
+ fbHuu7h0gbSK+ZPbJvyPPI+r90j/qRq8SXrnJ8nT49NswHuj5PmMBdYMslSO
+ PpnAoq+YyukeQ+HagWr3khcSZx+GYY14kBpBNiDZpG03NKzjZkT6fYugqHE0
+ B9HC22XSKrwQJwIIbSpVRJ3UF2pcx0aWjMQfuvdteJyD9XkmeNa6uiQGl05G
+ KJuqhDCCAR0GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEOsT67vXcPF/Pbqc
+ j6x76aOAgfBjd1srdGK6PJUs5Inkop441ce2v3jij/1oo9fRswSTgAMGHSGg
+ 4zqbuZH2eR9hUXd/Mn8DmrAF4O285K7J6ei+9Eqkyf4xoIGV0VT9OiXDbJ6K
+ mUdm0gPYWdjYnN6FEIo2sLxBf6NDyRXFnjALnY6hfS8ePD4vRLHld3gDErdA
+ QwVQDewb+L5H3mrTNnM/2ex9M1ekRXK3z0lfn4q1H7UUZLS6Y5vmH4Tl7kTk
+ QeVCvUatI5fSzNaAi+N15nMo2X/ojgTn/CS9zklA5du1XgI1xzqsHyb7zirv
+ Bq5sNCy9CM2at4UMKVqsU7FpdIIxjFw=]
profiles::cacert_selfservice::base_url: https://selfservice.cacert.org/
profiles::cacert_selfservice::cookie_secret: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEANEuaG5H4qNkySuid+UUP7aurU5shEpoV+Aei
- ChIT8OzQA9v6NpOaz9UvorSrebLI7MZ3N9WOT54tEppjdesooX270wq+xi/k
- IEzP/3IU72GQCfpDyanTRO5mDSkWMUTySbE2b2lIelDTM/r6V70EZTLcLxvb
- 96HtiZ3keAfVlXPpM8B8FKbVHBhnPkMOgy2gs0lqc9FXBAlAUdCirgH9X/Y9
- HC3SjiZrKUDdWHRS5p0a/b1e1GNGEn9RyFaJaS4tAvTgBbM5nJtWgw/jniRq
- qABbA6dB6kMvyMNVTmcGCT3TvgqD0CnmjwH1KeiS26SGfB6EMlSzT0s1Lf4V
- jvBrrDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAxi4Yrk00u8lUnFF9C
- jzdVgDCAXKS3fskZkAIHmTnoK3bWVEdvaeiA65LyuzOTArxhinWKqdD9cgBc
- 5D6njEaLuT4=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEANEuaG5H4qNkySuid+UUP7aurU5shEpoV+Aei
+ ChIT8OzQA9v6NpOaz9UvorSrebLI7MZ3N9WOT54tEppjdesooX270wq+xi/k
+ IEzP/3IU72GQCfpDyanTRO5mDSkWMUTySbE2b2lIelDTM/r6V70EZTLcLxvb
+ 96HtiZ3keAfVlXPpM8B8FKbVHBhnPkMOgy2gs0lqc9FXBAlAUdCirgH9X/Y9
+ HC3SjiZrKUDdWHRS5p0a/b1e1GNGEn9RyFaJaS4tAvTgBbM5nJtWgw/jniRq
+ qABbA6dB6kMvyMNVTmcGCT3TvgqD0CnmjwH1KeiS26SGfB6EMlSzT0s1Lf4V
+ jvBrrDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAxi4Yrk00u8lUnFF9C
+ jzdVgDCAXKS3fskZkAIHmTnoK3bWVEdvaeiA65LyuzOTArxhinWKqdD9cgBc
+ 5D6njEaLuT4=]
profiles::cacert_selfservice::csrf_key: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAb3LeVK/doYxs7FwFIbvp21i6M27fmSXtIK3E
- p36brmcQCjnbCeLpHkE2FroYZJQmtNY9EGGUzkQsyoBDicK3j3w754LGMDgn
- s3PL+hDk16X45yBFgcnTS/C3jFbm3SklFsNfpLGEEbCjwlTyL9txnQfU6zw8
- +xHOrpSiSRM5hAA5/i2vEgErZlh9kVqKoXNJdj2X2oIjW8vw37rlPO6w4iIy
- 3fTHtCFsfKqaa7QmsBuXrK6IDKMVsTPr+daav/8YwacVuptnzr+pFww/u3pb
- +B/ES8qGRen7ibaZcoxBmxmUNtPSpuqsyHBnyVVJQO3c9ZQzLq+wRJYkKK+k
- j+0DMTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCbhyOCOabOgrKCo5Jw
- s5cUgDCvQ0SCr1BLrJWi21P+kE3B5QZN/q/3cTEVB3j4emy+j3DhHjJX096J
- HE5b/Ql5GqE=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAb3LeVK/doYxs7FwFIbvp21i6M27fmSXtIK3E
+ p36brmcQCjnbCeLpHkE2FroYZJQmtNY9EGGUzkQsyoBDicK3j3w754LGMDgn
+ s3PL+hDk16X45yBFgcnTS/C3jFbm3SklFsNfpLGEEbCjwlTyL9txnQfU6zw8
+ +xHOrpSiSRM5hAA5/i2vEgErZlh9kVqKoXNJdj2X2oIjW8vw37rlPO6w4iIy
+ 3fTHtCFsfKqaa7QmsBuXrK6IDKMVsTPr+daav/8YwacVuptnzr+pFww/u3pb
+ +B/ES8qGRen7ibaZcoxBmxmUNtPSpuqsyHBnyVVJQO3c9ZQzLq+wRJYkKK+k
+ j+0DMTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCbhyOCOabOgrKCo5Jw
+ s5cUgDCvQ0SCr1BLrJWi21P+kE3B5QZN/q/3cTEVB3j4emy+j3DhHjJX096J
+ HE5b/Ql5GqE=]
profiles::cacert_selfservice::https_address: :8443
profiles::cacert_selfservice::server_certificate: |
- -----BEGIN CERTIFICATE-----
- MIIGRjCCBC6gAwIBAgIDAvE1MA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB
- Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV
- BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjEwNzE2MjIyMTM2WhcNMjMwNzE2
- MjIyMTM2WjBjMQswCQYDVQQGEwJBVTEMMAoGA1UECBMDTlNXMQ8wDQYDVQQHEwZT
- eWRuZXkxFDASBgNVBAoTC0NBY2VydCBJbmMuMR8wHQYDVQQDExZzZWxmc2Vydmlj
- ZS5jYWNlcnQub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsz/5
- vDt+ZOwPvfQJiaZgN2VwIDF079gf5rVi0Isw7maNj1lcN3oNjyF2UneOkx9b5yw7
- kHytifd/Hz5Exg7DJDrSc7eW1tmXGZWWtK2PX3G0gG3uWfqfxMSmB6gHRvj+YcSb
- AXzlzcO+SQQ7GV2nZI1ZpfJ1jLuBjK8Hchr7zp9IWw/dWJtROBuyIOTiLHiVKehe
- vHOnvDF9MPqoPJFoi+PoZCU8MwCqKLTc/d/RfsvIG1BwnoyiDzieeDsCPfssJciz
- Kb3MC0V+zw0LxWS3RPZMsR/rTz3sEIUyy/NdADdA4rY/LAXI1dVxNsJgaU6jGfO6
- aub21X6s4cHRsed07xBYHe5LJCV0ExAx23V0ihWM4R9mEFAyLrfuoO6oodiuopGE
- jybeYEq0qLFjMpNZX5bnJ7X53Z9kb0kV2Ft+0jYFUmGvp27JnWN+dAcJ0T08+Uqs
- zaiNS0fj4Wgd8WZYIkmVM+MzCGmKcjOvCgQFa+wZvvgRG69nsxl+Zr2e+8WUJoQi
- Tvsp9z1YwidmN2U22HmX7xukvDVLWi0R7reSyjld3Wo9Qn/UCTkyYHpjPUdPhYQV
- avOaturVpISXcANZi9XkMXO9k/osEywH2oeqy95bXT7w14Hla8Lg4Y5tISiKny9g
- sZNeqx35v1CkDxofG/uHKI9EvVdJKyeHU9RXlXkCAwEAAaOCARAwggEMMAwGA1Ud
- EwEB/wQCMAAwDgYDVR0PAQH/BAQDAgOoMDQGA1UdJQQtMCsGCCsGAQUFBwMCBggr
- BgEFBQcDAQYJYIZIAYb4QgQBBgorBgEEAYI3CgMDMDMGCCsGAQUFBwEBBCcwJTAj
- BggrBgEFBQcwAYYXaHR0cDovL29jc3AuY2FjZXJ0Lm9yZy8wOAYDVR0fBDEwLzAt
- oCugKYYnaHR0cDovL2NybC5jYWNlcnQub3JnL2NsYXNzMy1yZXZva2UuY3JsMEcG
- A1UdEQRAMD6CFnNlbGZzZXJ2aWNlLmNhY2VydC5vcmegJAYIKwYBBQUHCAWgGAwW
- c2VsZnNlcnZpY2UuY2FjZXJ0Lm9yZzANBgkqhkiG9w0BAQ0FAAOCAgEAfyuR8eIs
- vsC7wjW1fXTNwgeniAoiYvrWpDHQLmHX9cbkfQ+UkL5L9N9uJGdFa77GSPQ54wl0
- Cc+oGQcdO84h0hJAPZaiAgCBgE79h6ZLFLxdsbArjTTbNE8LDCRG8To+0Q9Gfvuh
- RtsLh3R9mSCKXug9iJs4nV+3BeJI/wVWdkBY3gKdM4hgdLf6zW6lg0yLBRSi6b+k
- ECuX8Pwjp/oxkNtptDettBXVNW/11j8AFDqOs+TlITbgmz1Gb2NE42C6Fl+cW4ZC
- ksiLr1c57tUDpAvKmtU6f4n7cCbfXX3gZYMCrVLAkEdwi3LGbyKoa1Rfh4pIWUsY
- gXmfEr7oFWI5jWSfOjbxvuJEaADOR30fLHqTWSe1egcgheDn/XcW8ktFhOoZYcpI
- y2kLxhTW3K/cxy172xfm3k11/bTNWo1eyDLYNI+604KkFALowLtc+VG71CGhgCsv
- sHNowDK5arfWb66qt4lgwqNVO3l4zCyulYRAS24twwVq1xOKTGEeJDexG+PidEa0
- 8rHGA0c9nmddvTXabRMCgMy4H5tXvyZm5L4WYNNLuBi2h0Zgjdsvx4ikfHH6KI09
- n4qkQ6vCStSbSiZ96ezAVN2Nb0tlFaSGJUGHhZnpvdeSgHI97r4X/52AXQj0SZO8
- vOh92Z6rXG+f9faejmypByLAl0dIaDG1VPQ=
- -----END CERTIFICATE-----
+ -----BEGIN CERTIFICATE-----
+ MIIGRjCCBC6gAwIBAgIDAvE1MA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB
+ Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV
+ BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjEwNzE2MjIyMTM2WhcNMjMwNzE2
+ MjIyMTM2WjBjMQswCQYDVQQGEwJBVTEMMAoGA1UECBMDTlNXMQ8wDQYDVQQHEwZT
+ eWRuZXkxFDASBgNVBAoTC0NBY2VydCBJbmMuMR8wHQYDVQQDExZzZWxmc2Vydmlj
+ ZS5jYWNlcnQub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsz/5
+ vDt+ZOwPvfQJiaZgN2VwIDF079gf5rVi0Isw7maNj1lcN3oNjyF2UneOkx9b5yw7
+ kHytifd/Hz5Exg7DJDrSc7eW1tmXGZWWtK2PX3G0gG3uWfqfxMSmB6gHRvj+YcSb
+ AXzlzcO+SQQ7GV2nZI1ZpfJ1jLuBjK8Hchr7zp9IWw/dWJtROBuyIOTiLHiVKehe
+ vHOnvDF9MPqoPJFoi+PoZCU8MwCqKLTc/d/RfsvIG1BwnoyiDzieeDsCPfssJciz
+ Kb3MC0V+zw0LxWS3RPZMsR/rTz3sEIUyy/NdADdA4rY/LAXI1dVxNsJgaU6jGfO6
+ aub21X6s4cHRsed07xBYHe5LJCV0ExAx23V0ihWM4R9mEFAyLrfuoO6oodiuopGE
+ jybeYEq0qLFjMpNZX5bnJ7X53Z9kb0kV2Ft+0jYFUmGvp27JnWN+dAcJ0T08+Uqs
+ zaiNS0fj4Wgd8WZYIkmVM+MzCGmKcjOvCgQFa+wZvvgRG69nsxl+Zr2e+8WUJoQi
+ Tvsp9z1YwidmN2U22HmX7xukvDVLWi0R7reSyjld3Wo9Qn/UCTkyYHpjPUdPhYQV
+ avOaturVpISXcANZi9XkMXO9k/osEywH2oeqy95bXT7w14Hla8Lg4Y5tISiKny9g
+ sZNeqx35v1CkDxofG/uHKI9EvVdJKyeHU9RXlXkCAwEAAaOCARAwggEMMAwGA1Ud
+ EwEB/wQCMAAwDgYDVR0PAQH/BAQDAgOoMDQGA1UdJQQtMCsGCCsGAQUFBwMCBggr
+ BgEFBQcDAQYJYIZIAYb4QgQBBgorBgEEAYI3CgMDMDMGCCsGAQUFBwEBBCcwJTAj
+ BggrBgEFBQcwAYYXaHR0cDovL29jc3AuY2FjZXJ0Lm9yZy8wOAYDVR0fBDEwLzAt
+ oCugKYYnaHR0cDovL2NybC5jYWNlcnQub3JnL2NsYXNzMy1yZXZva2UuY3JsMEcG
+ A1UdEQRAMD6CFnNlbGZzZXJ2aWNlLmNhY2VydC5vcmegJAYIKwYBBQUHCAWgGAwW
+ c2VsZnNlcnZpY2UuY2FjZXJ0Lm9yZzANBgkqhkiG9w0BAQ0FAAOCAgEAfyuR8eIs
+ vsC7wjW1fXTNwgeniAoiYvrWpDHQLmHX9cbkfQ+UkL5L9N9uJGdFa77GSPQ54wl0
+ Cc+oGQcdO84h0hJAPZaiAgCBgE79h6ZLFLxdsbArjTTbNE8LDCRG8To+0Q9Gfvuh
+ RtsLh3R9mSCKXug9iJs4nV+3BeJI/wVWdkBY3gKdM4hgdLf6zW6lg0yLBRSi6b+k
+ ECuX8Pwjp/oxkNtptDettBXVNW/11j8AFDqOs+TlITbgmz1Gb2NE42C6Fl+cW4ZC
+ ksiLr1c57tUDpAvKmtU6f4n7cCbfXX3gZYMCrVLAkEdwi3LGbyKoa1Rfh4pIWUsY
+ gXmfEr7oFWI5jWSfOjbxvuJEaADOR30fLHqTWSe1egcgheDn/XcW8ktFhOoZYcpI
+ y2kLxhTW3K/cxy172xfm3k11/bTNWo1eyDLYNI+604KkFALowLtc+VG71CGhgCsv
+ sHNowDK5arfWb66qt4lgwqNVO3l4zCyulYRAS24twwVq1xOKTGEeJDexG+PidEa0
+ 8rHGA0c9nmddvTXabRMCgMy4H5tXvyZm5L4WYNNLuBi2h0Zgjdsvx4ikfHH6KI09
+ n4qkQ6vCStSbSiZ96ezAVN2Nb0tlFaSGJUGHhZnpvdeSgHI97r4X/52AXQj0SZO8
+ vOh92Z6rXG+f9faejmypByLAl0dIaDG1VPQ=
+ -----END CERTIFICATE-----
profiles::cacert_selfservice::server_private_key: >
- ENC[PKCS7,MIIOPQYJKoZIhvcNAQcDoIIOLjCCDioCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAt3on6CqHyfkSR12NDKy27ln9CNYSig4vnazz
- 1SU89n50FroloNyQNkryp9owAQhmlkdI8+XQxMfP+ujXNahj2mjQQPJullm/
- i0/8Yr11b9e6CQ/S940Re6203Z+wJDOtOiiv7lckWeBojfvbh0jxU21wvgRM
- WQy8qpyfReAeopxxjv7ibWR3/WdJIReIWgQnCtJv7Is5a+QqpYXbDb6G3AK0
- sHFyY2ZYmWOROwCV7cIRr51Ta7NLIC2y0U+TDc5FLzCR0sauA8jtvSc58pT5
- DFHBTsYdqlnlH0bsxqAffYuZdZfCB2gZhRFyshxprJt6Pp5DEsHlzmBgVu3d
- 8Pg0uzCCDP4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEJUGBdM86l45Q2aM
- CTGHxoaAggzQkBGmiEON8uEXus4pljSwufuQuH7+XLQxlE91NTaXiJaDh3q2
- iIfH+2/Z33GfOCsDrOkxtaHKrxAGatxvOQUKtfl8kCAkSNK2qrlRhfqyeJiR
- 8twoLYe/p7ijufLZBxR05KrwfJC5baWqA4f1psy2c4kStgTe6w4T7iJMhAHH
- mQM7FfbZgKncmsPAdEAxGj0r0sf0iLCOkAQsoZQ52J5oKUE8/q1ywjMYnnEy
- a15JyQpODCjUI9pTpuGwUr90bnFAh9/WWblEQROwSdjCM/tRnMYlB5LW7pGE
- WfXIZ/pxax7KDd9x3LG6gtDLyKpOCPSrotkO5NmjPKbJBu1PWeKT2tRWRUXR
- Ss5D1nvCipJUgijwAsXpiojCHBOgo9zjXe7PKoqT+H3sGJ0Fj8tO8L+tEs63
- lVbYA2cIX4x8f8HGzIQoQu0bqPX+ZNO1kDxjR5gxYLfmWjXaoQtfaEB29mIr
- KdpxjQ22cKw40CTE+Pd78g599aUHV0SNVnN7nW82vyZVl5nEiIQ0a8nO/A7Q
- o1DnaSUykNENGxKQ7xShtV2Z9win2BkqBblkO86oIQuG8ExYvxnyEW1udL3o
- D2vNrG7toLRAl9mTcP+YJbIgNX3pZIu6kY5WZA5cUEsKjG8Io9O2q8EExzUS
- w55bpzDNWD7hd91m13vx3lIqlaWuOUvNVfT3WPPNYAhSOByWi/1c/wkE0sF9
- PKp3yi8pkK/uh50mfR6ZLTg3gDVJNobqWUeq8zay/4Wo5uzPGwgTa28gQSyT
- IXeAdmSXz9HQBKcvunEkwefgHSIvFHPDxQo+0kodVWNjqyYxCwiuCpaWsXbH
- IO7FL/+afYA3nCSk7Ijpo4Q/cKi0rtGBedvbxbLwwXlGhBDmimc6OLSHfaNQ
- +0sVk8BxFqxBDhEW9A0t4XyPJ3SVv8SC66ldLYHW71Uajyysp9lhOLFwWFfO
- sXwTMvXDF7q1x47d5s3UM8W34djobVBHjlrF8TNHLvI7DwrIktzRvJ60Qmch
- OIspFZHNdmMAD2EK/LVwcSVfP+bkBeez3pX53y8lDPqaJtEGwygRPhAYyKyg
- V0lwZoqcmJihxTLJPreolkIBbiWRh6TVafFAykxPJAdQDgQimS2o4FZtRkZt
- 3A4vwK5zWhzDTezBzzTZAC9NuJA6VYWhiRrQ8NKrOhbz8D2lgPnuhJu71/vE
- lfkAPCyQTIY8YYxDhL1XgnWsCCHleIAMHHpC+kGZ/vnu2nLIji2KR/ii1Fr1
- JbXh9E9i2GhHp0eucxYBwS50sVwAFdouM5pDi8kfIzT2Dzmd6mArUBBawjgt
- cHCc0yeL9YgXRNxo2tBf73biJRBsC/+rtguaxnacb6JCszUbfAwXO44AR9YV
- vuCg4WKp1zQrWRtN9E2fj9QXHyKcXEgKvaoUOmREipeS2DTdwG56PtDfRG/N
- UPdrZnCDhZTY5Yvqo106bfAj0SY/ULGTXe3paBwaOcLTKOGTkXUVpK2dcUdw
- k2TuiexKcRPlTjDMX/BH4HYeTeBR+UjZdOKGc2oQ4wsL4IsPhqcfK0GKVBCf
- eGJ+mGIbGCT2HcWb2igeXL+BRD6ykimO4DfspgfDgIUDB7FZFJuUoaDRjQ/I
- J4hWG6fLn9PNKFZ2BhQ1mv2eJy3yNiQXLtpkCarS2mRmipGVgrCHgO5S/TdL
- B9Otn9dHKY6cuXXhenH1vqXBsLCnPFeX/6ewhJ+MTWryE5cIhLbEZHq9RtbW
- zxJXe0eadPJXWLd6OBPqr0V9M/XGpI5q9k7tHpVvBn467RbQrAk7zkYQcOOL
- J1ZYDmzjELd662qLNLR36YIC0/lX6aw/6T1cOqgnoh7GUDpt/z8b9K99LXXx
- +FRO5KXSORj++DA3MdJoB4XeSkKPXp5xqoVP36/657ynj/dvNLhHS2QvcKvM
- Nnr3icyk0jAlWip/sE+mRYJJ7mz3yB/sNx6QZ1vtWIiEypNK+fGPmi8NbchY
- XPS99rbAmL0Kk66Xrjd63PqqWVw981YC3r6COxYQJR1v2l6WolAgcDdOU36f
- EY41ltzSdSBtmCa/0Y2OAYkk/J5KxpMjYxoW080b7WNWNpaud4tPb1kiS4OA
- 5NKSZpmyJwOogDsVrYyQrvybU7x+eybyGh7zU9JOhI81yt93O7kpeRjEbcTb
- hRwUA9JN0JAAxxJVBuM29/SY9pBwprkgVFPME0m1Jfti9m7mf6rfxCOgMTLS
- zpPRyLUjRYLx95W6AlUpCi9CTZhlSXZB6rtJGRfm8vz44nZXbtaE/qhAA7h/
- bf0OL9GVmROHm2w9nxeFtVGKBcmgDGECFgeBZfT+ImrAdSmed4GO0BqjzooJ
- EZuet7nnm40kz+wyZrJAzUyyXUjkVj01r6yLlX1dogul8aeGWe44iXaswiXv
- ZFfOh3ewMa93kdjJQI1WTc3LmpNUoMJD4QwPOIs6H8Vsyzu9DKefmvEWBBa1
- CxX+F32/XPvn3qX+Qi0eJE1rvRnynyTUNzQSOZtTB+YUAtmqUglLeN7E3cSC
- wlJ46co2TkyaRZqrY28cax90GhOgkmOZK8MZQ4kPDWA1tddS3QP5L558sWeZ
- K5aMEIYTwCazPsVcy7v6MNOM06Yhnce1BOhioDS8vPI8pf84HDC99MSZSvYr
- qvDmr/gOVY+BrYfk0E9y7l4eVSpD7uDEDhaPS6lTZrj5JclihoGGKWUPmg7q
- XXEH3rwF9NqloFBDNDIcYTnIOpdo+vDKF04oA4Q3K35dh67kwVjW/3DqdC5R
- k/AcB+8+nCjWCxjYCxF9EJpenSmYhS8Seeuly4w57qpT23bwDk39whqBvnz3
- o/tWFCLhC9EuQ95S5h7cKxTLatgfD6/U8zuA8kkFA2Aq9JB2kZthU1HWglr5
- 7OhcmTa3j4zEF/946VjmjneVxdsbbT2WAf4+hf7CuByI0xEeGmboJQ6sAvoo
- 1ASdTIzZbfnbI0KjBuNK7OkI0XtmUr+hz3bWGrrXXOeEXPLd8WCJf9QzWjnS
- kLta5LzCHU5D54w20W5OxKmIW8al8QweYPKgV/PrOFwYLy57+2NJuDfu7646
- uszXtkOdfvAHp98KR/cGdaBMTGqO54CFfTBm9GlZ0wnkiJw2KxoNiJlsBoXB
- ahHGJzBU2QMGmWCLlk9cJXHJsj0FwhxCeGionq5IeJ4aUHTACFTnRn0mLJIE
- 0rNAd6ZuprpGb8ZhMOD2Evyfhfi6QH8k7lQkvZFnAKBkCwm9VvNMtNnBK1Jw
- SZPc1RJ/zuh/q/K5ROLz+w2hAXB8uzAvxxq/rUr9q8OHtrNspQL1hCiTYIpM
- 39ty9yOFY+vGSNTgkwNEVeMU511nngQFRF/kyNAXNFGYLdR+LyOWDzH8QcP0
- PSH4aqYeRR8ID2Rm4dwOBw7r97wQmH3s8YRXQ/7fryTx/5d6mAnuFW6y3v33
- VSU+SSaC8u+D1QWPg5opS0I0/om8cF53+hlp5KMZVRQB2Orl4TqXaYAG9MQt
- f58DDo3aIKBGpw4cV34XVq0N71oxxsileK9Lwi+MdwYLSkgy/dfZHlV7hRCT
- BcFA+WD4GvCEVriLey6E5u7RSxKg3X2TeuLGM8q18HpAzaJtfWIu31bzBJrr
- 0/Wzm/MQXlwHNzWJdH0igetK9PJz5QZ+kkU7TaP+crYm4KrA/7/d+fEdLIIB
- zZQ6LDXJeQjW2gLSirKezuFbpHY1uhJibi1gASxqT1e2WuJTvliUSoc5aEiu
- yivOYX+nyg7+EpUl1WDsOqAbSchqsM1oQ5oCdkehWAN00szO+/Kn3SaIZLda
- v9pUtuxYSOTVNZECXq1nR4/0tMO9qFdlaBk8PzWIkeNkrCblZ8tS9yTpoSYe
- omUKIN0npvEqB6Vfdk0ZpxVxqErnsr8gGiCPmGebtklFFvGDdWI1gfnIrKeP
- Llirqqf3mIv8107hv8ozayWsHD1PhEiRKmputKU+5bb3PJb61MiFNaIdflgR
- OJYhZ6bhtVm/ofUQAUY2AATURZbkSYPHYidgXd45QoVOA0Oc5pxmA3f/tJ+f
- avp32Ix/y5MmzpPwUESjv7WPnvlU+WADzXuyTJXCOED6Y5LMp//U0lNr+AXQ
- rlc8d6na/DTTyIDFd42W+Yvy7wl0JofyIUSsPGRx/srzzeJAq0k31GmmMPXN
- TGb/HtFj+BaUDPn+5G/2KdCsCbFqKk2MiuBZ7GYVxJMH83zFAhxQy8APOgke
- b24elx5vnfEENvbFrlWHp48KJzHGiBwvabw2TGSsIZj0TCIIS179F7T/ecyy
- meSzL66S0bE3fMQW7PHJBEJfd1rF7Lzc1zyYOuEEKxKuZTAv0oNJa7boRFWN
- b7xfkInLzKPfTfNlY9txwOqlGWYfZxa4d6fBKbVxdspf8WnTIrXgWshjWYcV
- /r8P6g==]
+ ENC[PKCS7,MIIOPQYJKoZIhvcNAQcDoIIOLjCCDioCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAt3on6CqHyfkSR12NDKy27ln9CNYSig4vnazz
+ 1SU89n50FroloNyQNkryp9owAQhmlkdI8+XQxMfP+ujXNahj2mjQQPJullm/
+ i0/8Yr11b9e6CQ/S940Re6203Z+wJDOtOiiv7lckWeBojfvbh0jxU21wvgRM
+ WQy8qpyfReAeopxxjv7ibWR3/WdJIReIWgQnCtJv7Is5a+QqpYXbDb6G3AK0
+ sHFyY2ZYmWOROwCV7cIRr51Ta7NLIC2y0U+TDc5FLzCR0sauA8jtvSc58pT5
+ DFHBTsYdqlnlH0bsxqAffYuZdZfCB2gZhRFyshxprJt6Pp5DEsHlzmBgVu3d
+ 8Pg0uzCCDP4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEJUGBdM86l45Q2aM
+ CTGHxoaAggzQkBGmiEON8uEXus4pljSwufuQuH7+XLQxlE91NTaXiJaDh3q2
+ iIfH+2/Z33GfOCsDrOkxtaHKrxAGatxvOQUKtfl8kCAkSNK2qrlRhfqyeJiR
+ 8twoLYe/p7ijufLZBxR05KrwfJC5baWqA4f1psy2c4kStgTe6w4T7iJMhAHH
+ mQM7FfbZgKncmsPAdEAxGj0r0sf0iLCOkAQsoZQ52J5oKUE8/q1ywjMYnnEy
+ a15JyQpODCjUI9pTpuGwUr90bnFAh9/WWblEQROwSdjCM/tRnMYlB5LW7pGE
+ WfXIZ/pxax7KDd9x3LG6gtDLyKpOCPSrotkO5NmjPKbJBu1PWeKT2tRWRUXR
+ Ss5D1nvCipJUgijwAsXpiojCHBOgo9zjXe7PKoqT+H3sGJ0Fj8tO8L+tEs63
+ lVbYA2cIX4x8f8HGzIQoQu0bqPX+ZNO1kDxjR5gxYLfmWjXaoQtfaEB29mIr
+ KdpxjQ22cKw40CTE+Pd78g599aUHV0SNVnN7nW82vyZVl5nEiIQ0a8nO/A7Q
+ o1DnaSUykNENGxKQ7xShtV2Z9win2BkqBblkO86oIQuG8ExYvxnyEW1udL3o
+ D2vNrG7toLRAl9mTcP+YJbIgNX3pZIu6kY5WZA5cUEsKjG8Io9O2q8EExzUS
+ w55bpzDNWD7hd91m13vx3lIqlaWuOUvNVfT3WPPNYAhSOByWi/1c/wkE0sF9
+ PKp3yi8pkK/uh50mfR6ZLTg3gDVJNobqWUeq8zay/4Wo5uzPGwgTa28gQSyT
+ IXeAdmSXz9HQBKcvunEkwefgHSIvFHPDxQo+0kodVWNjqyYxCwiuCpaWsXbH
+ IO7FL/+afYA3nCSk7Ijpo4Q/cKi0rtGBedvbxbLwwXlGhBDmimc6OLSHfaNQ
+ +0sVk8BxFqxBDhEW9A0t4XyPJ3SVv8SC66ldLYHW71Uajyysp9lhOLFwWFfO
+ sXwTMvXDF7q1x47d5s3UM8W34djobVBHjlrF8TNHLvI7DwrIktzRvJ60Qmch
+ OIspFZHNdmMAD2EK/LVwcSVfP+bkBeez3pX53y8lDPqaJtEGwygRPhAYyKyg
+ V0lwZoqcmJihxTLJPreolkIBbiWRh6TVafFAykxPJAdQDgQimS2o4FZtRkZt
+ 3A4vwK5zWhzDTezBzzTZAC9NuJA6VYWhiRrQ8NKrOhbz8D2lgPnuhJu71/vE
+ lfkAPCyQTIY8YYxDhL1XgnWsCCHleIAMHHpC+kGZ/vnu2nLIji2KR/ii1Fr1
+ JbXh9E9i2GhHp0eucxYBwS50sVwAFdouM5pDi8kfIzT2Dzmd6mArUBBawjgt
+ cHCc0yeL9YgXRNxo2tBf73biJRBsC/+rtguaxnacb6JCszUbfAwXO44AR9YV
+ vuCg4WKp1zQrWRtN9E2fj9QXHyKcXEgKvaoUOmREipeS2DTdwG56PtDfRG/N
+ UPdrZnCDhZTY5Yvqo106bfAj0SY/ULGTXe3paBwaOcLTKOGTkXUVpK2dcUdw
+ k2TuiexKcRPlTjDMX/BH4HYeTeBR+UjZdOKGc2oQ4wsL4IsPhqcfK0GKVBCf
+ eGJ+mGIbGCT2HcWb2igeXL+BRD6ykimO4DfspgfDgIUDB7FZFJuUoaDRjQ/I
+ J4hWG6fLn9PNKFZ2BhQ1mv2eJy3yNiQXLtpkCarS2mRmipGVgrCHgO5S/TdL
+ B9Otn9dHKY6cuXXhenH1vqXBsLCnPFeX/6ewhJ+MTWryE5cIhLbEZHq9RtbW
+ zxJXe0eadPJXWLd6OBPqr0V9M/XGpI5q9k7tHpVvBn467RbQrAk7zkYQcOOL
+ J1ZYDmzjELd662qLNLR36YIC0/lX6aw/6T1cOqgnoh7GUDpt/z8b9K99LXXx
+ +FRO5KXSORj++DA3MdJoB4XeSkKPXp5xqoVP36/657ynj/dvNLhHS2QvcKvM
+ Nnr3icyk0jAlWip/sE+mRYJJ7mz3yB/sNx6QZ1vtWIiEypNK+fGPmi8NbchY
+ XPS99rbAmL0Kk66Xrjd63PqqWVw981YC3r6COxYQJR1v2l6WolAgcDdOU36f
+ EY41ltzSdSBtmCa/0Y2OAYkk/J5KxpMjYxoW080b7WNWNpaud4tPb1kiS4OA
+ 5NKSZpmyJwOogDsVrYyQrvybU7x+eybyGh7zU9JOhI81yt93O7kpeRjEbcTb
+ hRwUA9JN0JAAxxJVBuM29/SY9pBwprkgVFPME0m1Jfti9m7mf6rfxCOgMTLS
+ zpPRyLUjRYLx95W6AlUpCi9CTZhlSXZB6rtJGRfm8vz44nZXbtaE/qhAA7h/
+ bf0OL9GVmROHm2w9nxeFtVGKBcmgDGECFgeBZfT+ImrAdSmed4GO0BqjzooJ
+ EZuet7nnm40kz+wyZrJAzUyyXUjkVj01r6yLlX1dogul8aeGWe44iXaswiXv
+ ZFfOh3ewMa93kdjJQI1WTc3LmpNUoMJD4QwPOIs6H8Vsyzu9DKefmvEWBBa1
+ CxX+F32/XPvn3qX+Qi0eJE1rvRnynyTUNzQSOZtTB+YUAtmqUglLeN7E3cSC
+ wlJ46co2TkyaRZqrY28cax90GhOgkmOZK8MZQ4kPDWA1tddS3QP5L558sWeZ
+ K5aMEIYTwCazPsVcy7v6MNOM06Yhnce1BOhioDS8vPI8pf84HDC99MSZSvYr
+ qvDmr/gOVY+BrYfk0E9y7l4eVSpD7uDEDhaPS6lTZrj5JclihoGGKWUPmg7q
+ XXEH3rwF9NqloFBDNDIcYTnIOpdo+vDKF04oA4Q3K35dh67kwVjW/3DqdC5R
+ k/AcB+8+nCjWCxjYCxF9EJpenSmYhS8Seeuly4w57qpT23bwDk39whqBvnz3
+ o/tWFCLhC9EuQ95S5h7cKxTLatgfD6/U8zuA8kkFA2Aq9JB2kZthU1HWglr5
+ 7OhcmTa3j4zEF/946VjmjneVxdsbbT2WAf4+hf7CuByI0xEeGmboJQ6sAvoo
+ 1ASdTIzZbfnbI0KjBuNK7OkI0XtmUr+hz3bWGrrXXOeEXPLd8WCJf9QzWjnS
+ kLta5LzCHU5D54w20W5OxKmIW8al8QweYPKgV/PrOFwYLy57+2NJuDfu7646
+ uszXtkOdfvAHp98KR/cGdaBMTGqO54CFfTBm9GlZ0wnkiJw2KxoNiJlsBoXB
+ ahHGJzBU2QMGmWCLlk9cJXHJsj0FwhxCeGionq5IeJ4aUHTACFTnRn0mLJIE
+ 0rNAd6ZuprpGb8ZhMOD2Evyfhfi6QH8k7lQkvZFnAKBkCwm9VvNMtNnBK1Jw
+ SZPc1RJ/zuh/q/K5ROLz+w2hAXB8uzAvxxq/rUr9q8OHtrNspQL1hCiTYIpM
+ 39ty9yOFY+vGSNTgkwNEVeMU511nngQFRF/kyNAXNFGYLdR+LyOWDzH8QcP0
+ PSH4aqYeRR8ID2Rm4dwOBw7r97wQmH3s8YRXQ/7fryTx/5d6mAnuFW6y3v33
+ VSU+SSaC8u+D1QWPg5opS0I0/om8cF53+hlp5KMZVRQB2Orl4TqXaYAG9MQt
+ f58DDo3aIKBGpw4cV34XVq0N71oxxsileK9Lwi+MdwYLSkgy/dfZHlV7hRCT
+ BcFA+WD4GvCEVriLey6E5u7RSxKg3X2TeuLGM8q18HpAzaJtfWIu31bzBJrr
+ 0/Wzm/MQXlwHNzWJdH0igetK9PJz5QZ+kkU7TaP+crYm4KrA/7/d+fEdLIIB
+ zZQ6LDXJeQjW2gLSirKezuFbpHY1uhJibi1gASxqT1e2WuJTvliUSoc5aEiu
+ yivOYX+nyg7+EpUl1WDsOqAbSchqsM1oQ5oCdkehWAN00szO+/Kn3SaIZLda
+ v9pUtuxYSOTVNZECXq1nR4/0tMO9qFdlaBk8PzWIkeNkrCblZ8tS9yTpoSYe
+ omUKIN0npvEqB6Vfdk0ZpxVxqErnsr8gGiCPmGebtklFFvGDdWI1gfnIrKeP
+ Llirqqf3mIv8107hv8ozayWsHD1PhEiRKmputKU+5bb3PJb61MiFNaIdflgR
+ OJYhZ6bhtVm/ofUQAUY2AATURZbkSYPHYidgXd45QoVOA0Oc5pxmA3f/tJ+f
+ avp32Ix/y5MmzpPwUESjv7WPnvlU+WADzXuyTJXCOED6Y5LMp//U0lNr+AXQ
+ rlc8d6na/DTTyIDFd42W+Yvy7wl0JofyIUSsPGRx/srzzeJAq0k31GmmMPXN
+ TGb/HtFj+BaUDPn+5G/2KdCsCbFqKk2MiuBZ7GYVxJMH83zFAhxQy8APOgke
+ b24elx5vnfEENvbFrlWHp48KJzHGiBwvabw2TGSsIZj0TCIIS179F7T/ecyy
+ meSzL66S0bE3fMQW7PHJBEJfd1rF7Lzc1zyYOuEEKxKuZTAv0oNJa7boRFWN
+ b7xfkInLzKPfTfNlY9txwOqlGWYfZxa4d6fBKbVxdspf8WnTIrXgWshjWYcV
+ /r8P6g==]
profiles::cacert_selfservice::jwt_private_key: >
- ENC[PKCS7,MIICXAYJKoZIhvcNAQcDoIICTTCCAkkCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAqkP3W1VRWy1uh8R6lGuqFXDVf+B0HhrFHmvn
- FtxQWRVlQZzudoQnWJsLR/J41qk7bX/eOmv8S5nKIwRIvovwb7tI+T9TaJ33
- hXUMZ9TBTjkz3OD6Pv/dsp/2zvGFHICEwIcUaJD2tBAqFPM1JhlJqXAwRNCK
- d2r8787fglChU/EpMhA45FvXvkCDxBE9W+L+aMzMlV6DcnQPCqKZwADQuBDS
- qw41j/hvmPzjconmV8aknXBdTaKUqKuspmn3tLIQGMRHUnKxq80AV5kdqlTy
- 1PwhN6FdFqBfosJuemV6eM6B0wupa4NK5iYvuRN/htQXJOjw562KUPDE1oe3
- PXqK0DCCAR0GCSqGSIb3DQEHATAdBglghkgBZQMEASoEECj13+wuFOeVRqiX
- d/s4ZZSAgfAx98UDQlEtcfX+5fCgw2ofqTD1K1KBzpGemGD9UbK0AI+sFhpY
- SyeuzhXS+s/XP9MYtlHgZiVgt7B95+EnCoGNGWfY5gWFzSvu63zikEGTT9tf
- 6iPS/A4sYu+HFPuE/ryHrCBJi0e1yaf2pa5IctFhpeWF++Dw3pmYC3c3sZb6
- ieCxxZ4r+NiPvS3xnAE+q3P7z5R3OTVYZkmLCupzBtnqi8Ne/TdvmUBWDtw4
- 2v8bs97vfnguWiynjekfeZgjO28SWiJYwLFuQUtV+kvYl9baPpORFTfuI3Rs
- dCF8snPWlLs3m+PXsz2HoiGe0s2tBKM=]
+ ENC[PKCS7,MIICXAYJKoZIhvcNAQcDoIICTTCCAkkCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAqkP3W1VRWy1uh8R6lGuqFXDVf+B0HhrFHmvn
+ FtxQWRVlQZzudoQnWJsLR/J41qk7bX/eOmv8S5nKIwRIvovwb7tI+T9TaJ33
+ hXUMZ9TBTjkz3OD6Pv/dsp/2zvGFHICEwIcUaJD2tBAqFPM1JhlJqXAwRNCK
+ d2r8787fglChU/EpMhA45FvXvkCDxBE9W+L+aMzMlV6DcnQPCqKZwADQuBDS
+ qw41j/hvmPzjconmV8aknXBdTaKUqKuspmn3tLIQGMRHUnKxq80AV5kdqlTy
+ 1PwhN6FdFqBfosJuemV6eM6B0wupa4NK5iYvuRN/htQXJOjw562KUPDE1oe3
+ PXqK0DCCAR0GCSqGSIb3DQEHATAdBglghkgBZQMEASoEECj13+wuFOeVRqiX
+ d/s4ZZSAgfAx98UDQlEtcfX+5fCgw2ofqTD1K1KBzpGemGD9UbK0AI+sFhpY
+ SyeuzhXS+s/XP9MYtlHgZiVgt7B95+EnCoGNGWfY5gWFzSvu63zikEGTT9tf
+ 6iPS/A4sYu+HFPuE/ryHrCBJi0e1yaf2pa5IctFhpeWF++Dw3pmYC3c3sZb6
+ ieCxxZ4r+NiPvS3xnAE+q3P7z5R3OTVYZkmLCupzBtnqi8Ne/TdvmUBWDtw4
+ 2v8bs97vfnguWiynjekfeZgjO28SWiJYwLFuQUtV+kvYl9baPpORFTfuI3Rs
+ dCF8snPWlLs3m+PXsz2HoiGe0s2tBKM=]
profiles::x509cert_common::certificates:
'webmail.cacert.org':
certificate: |
-----BEGIN CERTIFICATE-----
- MIIGdDCCBFygAwIBAgIDAuN8MA0GCSqGSIb3DQEBCwUAMFQxFDASBgNVBAoTC0NB
+ MIIGdDCCBFygAwIBAgIDAvroMA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB
Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV
- BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjAwNjA2MTExMDQxWhcNMjIwNjA2
- MTExMDQxWjBfMQswCQYDVQQGEwJBVTEMMAoGA1UECBMDTlNXMQ8wDQYDVQQHEwZT
+ BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjIwNzE2MDkwODM1WhcNMjQwNzE1
+ MDkwODM1WjBfMQswCQYDVQQGEwJBVTEMMAoGA1UECBMDTlNXMQ8wDQYDVQQHEwZT
eWRuZXkxFDASBgNVBAoTC0NBY2VydCBJbmMuMRswGQYDVQQDExJ3ZWJtYWlsLmNh
Y2VydC5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCspKMHnd/Y
xvVqB7B/3bXfg7nReRR6WsP0xFzharKLkymoh3cMoFZU6gW/AyLPq2wicjJPtEUi
@@ -245,18 +245,18 @@ profiles::x509cert_common::certificates:
hidodHRwOi8vY3JsLmNhY2VydC5vcmcvY2xhc3MzLXJldm9rZS5jcmwweQYDVR0R
BHIwcIISd2VibWFpbC5jYWNlcnQub3JnoCAGCCsGAQUFBwgFoBQMEndlYm1haWwu
Y2FjZXJ0Lm9yZ4IUY29tbXVuaXR5LmNhY2VydC5vcmegIgYIKwYBBQUHCAWgFgwU
- Y29tbXVuaXR5LmNhY2VydC5vcmcwDQYJKoZIhvcNAQELBQADggIBAAStZDsACPPf
- /4NhO2O8ANSAOH6hIHFaxEbB4+aEY7an7rB/84Dis6O8xfh/K9Z+M9uob/jIfhEd
- 2bJdufSDbp3OkrhQj9/Acz2o0xettiFgJAh0SNf8/dH9U1cqRPCK3dNna6z8vOJJ
- XJJlyzTVli3N4AZOycmD3XNpC3INiEFOFRwfJLR7I4Nlv8YylmSc+BpnYlYQOWii
- TXfNWcmojuW/JHJT0xmMz0gpJOCbvjrd0MHVj8ygEP2u9a7kHMAE7o1Wc/P2KsqA
- +l1011KpjVNhO4Lln54ziWQ2F2x/R1dHNk5WrV9Y4J06drx1/UDR7QyLQ99II4YV
- qC+C/DYkwOzvBrWOWpoOov3PmrDEpsbVoWvIDyb0+G7xgm6nGSexaGbVxmXj07/o
- 7cW81GwohK29n6MXtVFcILAOHl5xyRH4f0PqRYx9WAu+pxpH8E423dnMpTNurkYS
- e5yNfo4tL+Fl91RcanwcVA0lFff07GsfFQn1ksgIMFvEVsVaK8OYHiOIgfr1eLUW
- DsCt63P8dEQf38vKlWD2XO7yD1jgjBOsFFbb/Eq8fGx8KiCGknNPZ2y2F4rhHew5
- od2HHMh61oL7n90kHdheFiPPwf8MtDb89yhPLPEKSLmVYB0NjhygOERwgZvix6Rm
- 49YgOhuoXJwGGiBI222zx/q/k6eI0wpB
+ Y29tbXVuaXR5LmNhY2VydC5vcmcwDQYJKoZIhvcNAQENBQADggIBAJI4h/417PFk
+ Ds/Q2v0regpEiIaXggnFLs3L3x58RP6uE4tAMTBiGrxbpytXxlIPLWdvBtxiJbQu
+ JycMKZ/ZvUUfHABKmVPpLMc1110CkDH4wnTH1/wdu/g35YrY91lI3ukVfhH+FCru
+ kL4vfS6CTYPf3rlJOf63FD/XdIJ3YtF1KVNwAoSoKrhU5+UJul+uY+30ghhsnrx/
+ gXuyoDr+/Qakz8WqYjVMe+gWqIVhabq/1UzIbNBb2Upc7o+9uoIw32sxQJPz8mxs
+ RlQdUd4XJLis/ZJIxGE7Ii8Fpyy7RxsSl7XDXlda9HNquf7gJP2bWaLje5RKBzzK
+ 2YM6goGKcbTvdhsBeRJRvmixeXcqEVqXUUtBvuDMsp1geDZag0PitvriedjB5zXd
+ DHg4F0mh6gV2MsMjhCzKvMY6nx8nf1GVZeQX0Me4c4W4gSUnXLmmUarmi0vg1OJ+
+ 61FLwxtCPyZAxlwnpMSCaT0KD8jzLz9fArv5dN2O0EqRHFzYQpVEAlHvfECA6FtR
+ ZcTGUPxat8auCOf5lVjHflCFdaGx5o483TqrATzQFfOZWzxtTrZ6H8BH6kRB0XSg
+ IeRxyzEqfD/IW+cJtKZplAJEzlv48BZImumLLQY+ROFryONYbLP3kIBsBsYelqNi
+ UtWEx9lSBrDbaHQNDUuH6yJmHZWYjgTg
-----END CERTIFICATE-----
private_key: >
ENC[PKCS7,MIIOPQYJKoZIhvcNAQcDoIIOLjCCDioCAQAxggEhMIIBHQIBADAFMAACAQEw
diff --git a/hieradata/nodes/email.yaml b/hieradata/nodes/email.yaml
index d8999d5..265a6de 100644
--- a/hieradata/nodes/email.yaml
+++ b/hieradata/nodes/email.yaml
@@ -6,16 +6,16 @@ profiles::base::admins:
- law
- jselzer
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEADx2myUcKr6RUVuWzwacoj5CCXO8klQz3wvjy
- kTIzTiJ5orDP4DKEBff039aBlocks3IWpvdXdv4qLdpHt4jrRpnUi7P7/w/A
- uYx+5+3euAF/EHOIDZ6BKnvW5K1BbGcVug0OVxYfqmHKcPu6ChQyYnvEnSmx
- Tt/n7MNcczAONzibh/o+IiEdpBkSeI6SOuOOa6au0KeA/vXNQyBgz1wD7JDr
- HqKpMYpmAqVfXqQTzjgNVTU7Xh1Cvj85d/oNrfhVJGy62LW09CRUALeATlF3
- dyyXly8q/Zjm+DeYom9futjUFWhQUTft58YOE+LSIYbvC4RsPdmMU+AaMdGM
- aVBhmjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDmO1bK1F+o/ClrvyHP
- qDUegDB5FE/kCJHikejLTd9x65fkNuaUMs9uTYaTUydsk/yPsD/fZWpRU3hM
- nUgJAjygFfc=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEADx2myUcKr6RUVuWzwacoj5CCXO8klQz3wvjy
+ kTIzTiJ5orDP4DKEBff039aBlocks3IWpvdXdv4qLdpHt4jrRpnUi7P7/w/A
+ uYx+5+3euAF/EHOIDZ6BKnvW5K1BbGcVug0OVxYfqmHKcPu6ChQyYnvEnSmx
+ Tt/n7MNcczAONzibh/o+IiEdpBkSeI6SOuOOa6au0KeA/vXNQyBgz1wD7JDr
+ HqKpMYpmAqVfXqQTzjgNVTU7Xh1Cvj85d/oNrfhVJGy62LW09CRUALeATlF3
+ dyyXly8q/Zjm+DeYom9futjUFWhQUTft58YOE+LSIYbvC4RsPdmMU+AaMdGM
+ aVBhmjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDmO1bK1F+o/ClrvyHP
+ qDUegDB5FE/kCJHikejLTd9x65fkNuaUMs9uTYaTUydsk/yPsD/fZWpRU3hM
+ nUgJAjygFfc=]
profiles::cacert_selfservice_api::client_identities:
- id: cac3ad11-fa50-43f6-8ded-15f598b6ca2a
key: |
@@ -24,147 +24,147 @@ profiles::cacert_selfservice_api::client_identities:
0J/6SxMU+jix4InG1tFL6yiikQqZMY9Gu4yYgF/WhiLrgjPbaGvlln0/FA==
-----END PUBLIC KEY-----
profiles::cacert_selfservice_api::db_password: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAjOBz2QKZTSY8lyV3SWjjatpm4CdVHPr4kfmx
- UwfclDNRZr2w2vZgFLOlImfwJCpGa0xJsEHtS+IEkIV8Mh7jfCmQ6bVWDGtt
- q1mYRdFHtUX4P2/Yw0sSXuMa7IGKeV7xYL3KNxZljjNieNP//DoCKF1MNE0V
- ik2xO6IRTd8vT2VAVOxSgarn9hs5aL7PpxmvTH0rp+Q5pgjUm4cHFjbW3ur5
- q2XWwfydXPfnBsG17xHlrFJowMZM9fRyq7FuYsm+zIYkm1+AgzFEr6ogA4Fc
- pTVghKACVzFMpd9v7u9FRvqbrUR+Q1GdckbwkvAJlkCkPLKah1LHoZW4jHlj
- OWG1xTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDMdsp1Zc87SdO2yp+w
- R9V1gDAZYPSwQJ/GbXBPy614dS5z++Q/8Go0Eve3bX+atTkYa4q3E5qrscAb
- CtCL1kfU66I=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAjOBz2QKZTSY8lyV3SWjjatpm4CdVHPr4kfmx
+ UwfclDNRZr2w2vZgFLOlImfwJCpGa0xJsEHtS+IEkIV8Mh7jfCmQ6bVWDGtt
+ q1mYRdFHtUX4P2/Yw0sSXuMa7IGKeV7xYL3KNxZljjNieNP//DoCKF1MNE0V
+ ik2xO6IRTd8vT2VAVOxSgarn9hs5aL7PpxmvTH0rp+Q5pgjUm4cHFjbW3ur5
+ q2XWwfydXPfnBsG17xHlrFJowMZM9fRyq7FuYsm+zIYkm1+AgzFEr6ogA4Fc
+ pTVghKACVzFMpd9v7u9FRvqbrUR+Q1GdckbwkvAJlkCkPLKah1LHoZW4jHlj
+ OWG1xTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDMdsp1Zc87SdO2yp+w
+ R9V1gDAZYPSwQJ/GbXBPy614dS5z++Q/8Go0Eve3bX+atTkYa4q3E5qrscAb
+ CtCL1kfU66I=]
profiles::cacert_selfservice_api::db_username: >
- ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAOj5c9aTiQd+MKVJmAoSMp+9/9YtdFmRtCyyA
- 6BMb3YqvQT8D70VI3Ttq6AaF0S3xttJvwHdDUgYv4pEJ9V7dnQUZb/mGi7ZN
- NM/R7VPN7sT/yS/z45TvGyz/VjSQuisCzj/cCg6ikXg2//BXj2h68BebiQz+
- 2NqJWrucTCjvK48eEu8QDKzigUyjGOpwkVD89RB2dHacSPbHqA5yTP1YLQdY
- JiG8S/IAqMjVKzuQiPnqrfmLBqiFHoARF68UML1rS46Tt5bV4DcVriIjZiUN
- Nt9bzOpBkyFkqAYFzXbYyQ3JeR4Mfb9i2wP+tIw5Hd2GaeoWBEJAdaqzsOb0
- 5NJX+DA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCl0t3nd/FDwqktfYoZ
- ReaagBBkwO8Mi7X2JTPI4jX5lDrS]
+ ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAOj5c9aTiQd+MKVJmAoSMp+9/9YtdFmRtCyyA
+ 6BMb3YqvQT8D70VI3Ttq6AaF0S3xttJvwHdDUgYv4pEJ9V7dnQUZb/mGi7ZN
+ NM/R7VPN7sT/yS/z45TvGyz/VjSQuisCzj/cCg6ikXg2//BXj2h68BebiQz+
+ 2NqJWrucTCjvK48eEu8QDKzigUyjGOpwkVD89RB2dHacSPbHqA5yTP1YLQdY
+ JiG8S/IAqMjVKzuQiPnqrfmLBqiFHoARF68UML1rS46Tt5bV4DcVriIjZiUN
+ Nt9bzOpBkyFkqAYFzXbYyQ3JeR4Mfb9i2wP+tIw5Hd2GaeoWBEJAdaqzsOb0
+ 5NJX+DA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCl0t3nd/FDwqktfYoZ
+ ReaagBBkwO8Mi7X2JTPI4jX5lDrS]
profiles::cacert_selfservice_api::mail_host: email.cacert.org
profiles::cacert_selfservice_api::server_certificate: |
- -----BEGIN CERTIFICATE-----
- MIIGRjCCBC6gAwIBAgIDAvE0MA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB
- Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV
- BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjEwNzE2MjIyMTMzWhcNMjMwNzE2
- MjIyMTMzWjBjMQswCQYDVQQGEwJBVTEMMAoGA1UECBMDTlNXMQ8wDQYDVQQHEwZT
- eWRuZXkxFDASBgNVBAoTC0NBY2VydCBJbmMuMR8wHQYDVQQDExZlbWFpbC5pbmZy
- YS5jYWNlcnQub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzyu4
- maECP9uBDeaqV9WDkEHj4YM67yMhenpdvabPV9b7bWXX0EeBmXiEd+8sHKR3cJqn
- i2RAnthNJdNYHf0cgJjyhDGAVU5RL1uZMaEbtTIX7jWPbXMp1OX2I8pDtgB5QLAm
- Q5sKmXhgH+DCVhxaud5B/CCI6eGfMjxH4fi5+iqSWsopa8Eh6If6pgh1WcFiXu+U
- QUa+2oSOwzG+AS16g1guNq+dqQKpGDx+qT4gg/QWrt5/bEhTlZOMUUPi9MoIV5lU
- Lqdgkn6Df6DPisT7S7iYrEM3HBLsxxoCT934UP/TN7yaOjgXYLVO59YzltOCAPiK
- nqheDAgHTFOqEQjxzY49fr4xHzf7eS4AaZzkM5x65lL7gmCXBKhOgGf5o1uiy90/
- nP1A16QWJZbjFZs/ExwSOqDUMqp2rfxkjE8UCHy2WQeBsOYUrWeDqUMoAlPRDbnM
- EYYY+cbddFiorBsT8Pps/qJzp6jYnFK38N+jRY8VkaDfN4L2LIkNv6lpiCt/7QNi
- 7+LzFfzaSNkThaF4Gp0feTbzLvuMhMuZevC1MynrYyvCCoSgRPl8WuFvY+Unb4Cy
- gjTpf6GIyNmnDFkVrGNX6VEXIJrJA7OmlWN4aKlyeNKpUhKkjAAh+GA72PpD6Hmq
- SxFNPKQrVzzToXebo4y48axz6lklSlK8uTgrBh8CAwEAAaOCARAwggEMMAwGA1Ud
- EwEB/wQCMAAwDgYDVR0PAQH/BAQDAgOoMDQGA1UdJQQtMCsGCCsGAQUFBwMCBggr
- BgEFBQcDAQYJYIZIAYb4QgQBBgorBgEEAYI3CgMDMDMGCCsGAQUFBwEBBCcwJTAj
- BggrBgEFBQcwAYYXaHR0cDovL29jc3AuY2FjZXJ0Lm9yZy8wOAYDVR0fBDEwLzAt
- oCugKYYnaHR0cDovL2NybC5jYWNlcnQub3JnL2NsYXNzMy1yZXZva2UuY3JsMEcG
- A1UdEQRAMD6CFmVtYWlsLmluZnJhLmNhY2VydC5vcmegJAYIKwYBBQUHCAWgGAwW
- ZW1haWwuaW5mcmEuY2FjZXJ0Lm9yZzANBgkqhkiG9w0BAQ0FAAOCAgEAXcqBRwu1
- JoeInJvvFBXJK1mn+vqX/jF7FEybBEI4qt8zO38nsqDu/+AWtMsrCcC1SjgZu/wL
- b0hjZAbfyK52oyzigv+LUxRI47BTcriKbNVR1tRvPuU013gAyxoXMwiVeDcMXDaT
- hy2BfKoewuXSNE+gtCEA2EIu2ecb50+Vj24VhiwyVbrpshc6QOLVwNOL4nkT+bqq
- T151LZYPWAL3PjsApVCo9OVgp3+UMcpUHKYD371cFVF/T2+Gx9tqEsnw9EDsI3r3
- UNSDcCuRICviEEugLRRbjq5NKQ1Exl2jMte4y32FYOU9MeS42slYuTczf0Jk1OZT
- WrtUQCgK5XWAk6zdOyg5IZb7uIFhEkq+A5rlFevi/OMOloMnNNZnCuBcLJWhIKme
- WvzBwBSL8AErsw1ErzzIaAMUnRYMINVmIpjY4Kvo0S9/OPp+R+yt6AmgR7i5Tx+q
- ubDBqCtZF//8nRJMsaW0IhhlBZjl8p1WUqyTz4bzX+M7lyRMuP7N4VlrLh/2bCDc
- vvpjHjlsqDcTiTNdMuJMgh747Y/kB7g1G2GzQtb+PCPbpUpgXHZedVR1NF566vXx
- y6ICDSC0zCLzuLDl9mH1Jf/4uXFa+frb0FMMuHr5/tGPd8LeTVY/N9nwOrra5fPN
- op/Jwgf6Qp3PDtdu51Eky3oAk4e/eqNkJLs=
- -----END CERTIFICATE-----
+ -----BEGIN CERTIFICATE-----
+ MIIGRjCCBC6gAwIBAgIDAvE0MA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB
+ Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV
+ BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjEwNzE2MjIyMTMzWhcNMjMwNzE2
+ MjIyMTMzWjBjMQswCQYDVQQGEwJBVTEMMAoGA1UECBMDTlNXMQ8wDQYDVQQHEwZT
+ eWRuZXkxFDASBgNVBAoTC0NBY2VydCBJbmMuMR8wHQYDVQQDExZlbWFpbC5pbmZy
+ YS5jYWNlcnQub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzyu4
+ maECP9uBDeaqV9WDkEHj4YM67yMhenpdvabPV9b7bWXX0EeBmXiEd+8sHKR3cJqn
+ i2RAnthNJdNYHf0cgJjyhDGAVU5RL1uZMaEbtTIX7jWPbXMp1OX2I8pDtgB5QLAm
+ Q5sKmXhgH+DCVhxaud5B/CCI6eGfMjxH4fi5+iqSWsopa8Eh6If6pgh1WcFiXu+U
+ QUa+2oSOwzG+AS16g1guNq+dqQKpGDx+qT4gg/QWrt5/bEhTlZOMUUPi9MoIV5lU
+ Lqdgkn6Df6DPisT7S7iYrEM3HBLsxxoCT934UP/TN7yaOjgXYLVO59YzltOCAPiK
+ nqheDAgHTFOqEQjxzY49fr4xHzf7eS4AaZzkM5x65lL7gmCXBKhOgGf5o1uiy90/
+ nP1A16QWJZbjFZs/ExwSOqDUMqp2rfxkjE8UCHy2WQeBsOYUrWeDqUMoAlPRDbnM
+ EYYY+cbddFiorBsT8Pps/qJzp6jYnFK38N+jRY8VkaDfN4L2LIkNv6lpiCt/7QNi
+ 7+LzFfzaSNkThaF4Gp0feTbzLvuMhMuZevC1MynrYyvCCoSgRPl8WuFvY+Unb4Cy
+ gjTpf6GIyNmnDFkVrGNX6VEXIJrJA7OmlWN4aKlyeNKpUhKkjAAh+GA72PpD6Hmq
+ SxFNPKQrVzzToXebo4y48axz6lklSlK8uTgrBh8CAwEAAaOCARAwggEMMAwGA1Ud
+ EwEB/wQCMAAwDgYDVR0PAQH/BAQDAgOoMDQGA1UdJQQtMCsGCCsGAQUFBwMCBggr
+ BgEFBQcDAQYJYIZIAYb4QgQBBgorBgEEAYI3CgMDMDMGCCsGAQUFBwEBBCcwJTAj
+ BggrBgEFBQcwAYYXaHR0cDovL29jc3AuY2FjZXJ0Lm9yZy8wOAYDVR0fBDEwLzAt
+ oCugKYYnaHR0cDovL2NybC5jYWNlcnQub3JnL2NsYXNzMy1yZXZva2UuY3JsMEcG
+ A1UdEQRAMD6CFmVtYWlsLmluZnJhLmNhY2VydC5vcmegJAYIKwYBBQUHCAWgGAwW
+ ZW1haWwuaW5mcmEuY2FjZXJ0Lm9yZzANBgkqhkiG9w0BAQ0FAAOCAgEAXcqBRwu1
+ JoeInJvvFBXJK1mn+vqX/jF7FEybBEI4qt8zO38nsqDu/+AWtMsrCcC1SjgZu/wL
+ b0hjZAbfyK52oyzigv+LUxRI47BTcriKbNVR1tRvPuU013gAyxoXMwiVeDcMXDaT
+ hy2BfKoewuXSNE+gtCEA2EIu2ecb50+Vj24VhiwyVbrpshc6QOLVwNOL4nkT+bqq
+ T151LZYPWAL3PjsApVCo9OVgp3+UMcpUHKYD371cFVF/T2+Gx9tqEsnw9EDsI3r3
+ UNSDcCuRICviEEugLRRbjq5NKQ1Exl2jMte4y32FYOU9MeS42slYuTczf0Jk1OZT
+ WrtUQCgK5XWAk6zdOyg5IZb7uIFhEkq+A5rlFevi/OMOloMnNNZnCuBcLJWhIKme
+ WvzBwBSL8AErsw1ErzzIaAMUnRYMINVmIpjY4Kvo0S9/OPp+R+yt6AmgR7i5Tx+q
+ ubDBqCtZF//8nRJMsaW0IhhlBZjl8p1WUqyTz4bzX+M7lyRMuP7N4VlrLh/2bCDc
+ vvpjHjlsqDcTiTNdMuJMgh747Y/kB7g1G2GzQtb+PCPbpUpgXHZedVR1NF566vXx
+ y6ICDSC0zCLzuLDl9mH1Jf/4uXFa+frb0FMMuHr5/tGPd8LeTVY/N9nwOrra5fPN
+ op/Jwgf6Qp3PDtdu51Eky3oAk4e/eqNkJLs=
+ -----END CERTIFICATE-----
profiles::cacert_selfservice_api::server_private_key: >
- ENC[PKCS7,MIIOPQYJKoZIhvcNAQcDoIIOLjCCDioCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAo+kOuakLJWl4gVaTboTX9JodKuNNtKTTFQk2
- bDFa3brAitjmvnoNsX27+Qi+JCQJ9fuqCI1pkdiWDP6iXB5XORFLXRCUBLCA
- 5ZNf2me3u8SYgxOH1yVo7AgDw8J6bYqQwcecTm0y0DkmZgEQBryZJVHe6CPD
- 7WqBwJreoYI6z/AMoeG9GAsa4CjziRvBTfbymXYtjO3prssRaCQ0rXHiD6JU
- 5a90YZm1U2/VwqwjWpTgYFD05hIHCtyD5PNlB8xd+S9sFRsRkRAFIUXkGIfI
- 6fjXHe7Jd5bTxMaKIaZmhuxqf4XEqf2qu0mMd9134XzhHJud5EmnH4HGjuIq
- NRvCtDCCDP4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEAWjoyge8WbAplaP
- 30tTCheAggzQ1xj7c23DNmkfATMVVBXlMO29wiov/MncD8zumAY+Jp0g+2Y0
- z7sN6TJdcFMWgEf1+6TPtZnIfWJ04TmpnYEaZd74J+xbUqKEakp56A2CdKdP
- wf8oiWX5FD2zvU7irXuU6G9k7eCn9K71gNXDrlEw+roKIZskPo1jVhGNRg/U
- Hv4WaticAlEv/txJJKCyQOSz4H8msmV13jKa7yLruM96Pm+AzxEk4NaV/DEB
- FS2dvDIQYOXaQZfKMNKSgutnaKeUuyw0VeCMY4y5iRkHGIGJ91iy6KmSa2cS
- R53o9CMpFcN9LUhMAvNdB8ZIv5qFapndIqjZXa+wSS1ixKoOa/1uXpPcGnDs
- drx0N7NeN8J4/TqlkAFm2Ga2ehjxVGCrN37jH6Z3cr9qFF/1x40ujuSaCI9/
- eC3gZNwowQOzqfINkZdXW/MLmAFeKm+2Bznh/syO2cb8n0TK0hncrf6sqA+k
- JTCYvwqoTDHiWWkXJ7u5uGTdbIxl1H9LPgJpRqNK7G7BItV0Do20CG+uKEVx
- gMlA743kdPjXZ4GbPPtSVbS5iEhfHo0IGVb8mQvNeye32NfT1QsgkNT9NNFK
- U2aFiROwYJGYoJ5zcth9HXMLInjfOggdvZM0DLKz65p8Hob5F3sNhZrSyFEm
- MEFYS8fsoNVdfmkBZ8JA8nHYOAaUMqmhhFDIn4g3Mnb7kGur+t97C1MzsqOI
- lqz8Vdhm3gqL/UKZp2NoPIyH1cTUACtpOXz8nJY25QJdEyhzgkX7UnGCRRuz
- Ev8dPZFRxNwuNO2N7ziDijePK9/VT9iK3CKb4gH8l/Zx51x62mUSGXEnNj6b
- Wwnde/o3acqGUF6qvyzeBHelDoSEC336zzCRyut0bGJD3P5zgmNYJ9WUQfph
- n2FdLv1Ddy9m0o1W+k0AUjKg+/Tfs/0Cw7Ma5EaykRvhP57HyteVCCwJIbhf
- Tf+8A3hw7lGwtUcTaclLs9o6JOhMzepWsigr/M1p3Ec/yjhORMCph7uD24UV
- cz2sd9BZhPUHi/NpBUt+KlxyRkwZzFfX8yKGzzp9kgO0EOcjKNq2tFfTY6xn
- /7Wu6tCp2DPFV/SZUcvF5SYuh2RSNBotj/BcGnY5/V8FACHxHLI2WCKCBHPZ
- 5SMx2JXxzg975HO5v6RK8gKiF//znG5u1U3JuS6NhGq90/EbAhhvF+LoCb6E
- dyWy1jWWOvrWAOa6nGxP+55wdQUGpgey2bADp9lhPKcAMyJz/VOt16tpmyOJ
- 565ykWISRIk3zb9pffTnlJGqC/zEDN2IBydQ5cl7b1wK5pZWLBnL4De/14T0
- 5TWcZOYXd+xBdZtBi83owAWYFts3MD1RCz40FZJRkbj7QPalkDDFR32XQQW3
- oPuxpNPwwUGfv/m/w2sIVeTSD4r6iEnYQreJ9xGHU7shErFjSWbYVeB/6wL+
- Ty4PCPz9JaqDQgECTy7gNBNyw6n3ucVrmIhnEbN6tk3c8ehgWspeDgI9LNfx
- hk0fUJLUBEnm/TINGolSdAsQSe/fZcOfq5L26SvSzJFlurFmmkaM5nF9kk06
- cvLqBdHOIEo1uHZYnlU+qETdsFcWo5ZrA8EN0j5s0XxK+yZuVgah3uPZ47XQ
- VrYJhaXTfSz0ybjiQRcteuivs/+wii6cfAoM9KZJoRSfNFgBpDvbIIHaWxci
- DIFhw1GzPnpB71eeGkjm2XPSf7u23iXTvTUYYVbsaU/z0DjUFz21Y+oKH4zy
- oUw0u9qa02Kvhk2YbI3xVDiMTkdd1coNW2wsW0nup8e0iU5epBAC9GV9IE3y
- BEhjsV0ojuh4sItlFOdL9/vWqu0rbYZo6ObTXkWUKb+rbVHpj+bX4QyofOoX
- BTndKhhtc1k4hVetbiSEG+MnOWSBZQN7CRHJT4/i4s7N21IvHBR2aowR7xNy
- FayoipaGffhmJ8IFlevIJytCfc0/2vlRZ3h0pib6K8UaVqNMqkdlMGpSmYfH
- M+SzqDTQhP52Rrsw7TVI8luE+j3G56XkLIzIsFeCN0ImV+LkwZ4xC8kurWs6
- HqioS5xeiZJupMs/YKek37sUuy/1ODL2t30JbHaPLRffvlb6H3eJoQ6qFVI2
- YzjwLWGWotrMduOONpnabSk/466dDgMmew7wANuTqPuD37uf34tqNVrAcmLi
- +Nh2Cl6fve/ESlptDMDDN6ThpXXIH0+OAOYBQlqFu5VTfJth4/g8k6LJBDRK
- I4ulySlVeENgQKTXvzcUpOo27xfdm4X9O4xU6CqOvtvirSuYzIodrEY821/F
- ZCBteES9JcHiBlwB3ku6BUJuIfUqWajafVHyc2iHdTylO3PfoogATomG44gX
- zOWsY0hM4WMV7bv50cGBVVZT9xzFoWdKBg9zn6dflMS4DapdrRaCiZ24YnRA
- RElTOthV4a4nX6dlbPHXnb2kVSvQD3sIMKGwI51nnESoU9hKXnaKnkMNkmVg
- sUDri3G52aJ3Plqy62x62DMQoHEkNriolK5nX+kNw/Yg/wNje6rQ4SvEkjCf
- 8VNsC/flbh6T/dP2C4uXoC+AwxCGx5l97WQWwrJ8Xwiuj1f0a0O7dv55ZbJw
- AkwQRf6NHkWorekw+84wY6IOAQ3nK/vFj2A/Th6iszdNxu3i4MrxmTw/YWw4
- eDgqV4nKAq2wz1q8xH5p8kjwcY46w088kHJoHllyheLhRlvaLsfIWKdHeHEa
- aImSDrcOE/jjqjR7e8VOiP8Vjyc1NaxWQvHrFQW/X+MfcWvQdJ2p/oEwCQDE
- mUZPJcddWqI9AamHlA/CsKJ56jqwqz4bGJMlqMqfAbdV8xDlWr9tbDnWectn
- a8LwX4FXe0iMCpR4umBDtlFo23N8g6FRt9WZyBTBSoZlZ2Xp/UFO8TqEG3Ol
- gVH3i9R7Set6o36kdhIUKSvsXt8vvO91HmNUmk24nhzQRwxrkL40RxrZh67O
- RqwBWVTSW3xBaSz1RnVAmN6FxRL+qLWt5O4RYK4I9YgxZW+PQzVdyVzpUZGm
- Q/GP9TcZN3723AhFy2tbRfEr/eHhlaSEB6ZuFMGkQ7ROn5RNdbwqex6B/wg8
- x+y1RFOkEILgPtyJR/z5allWhaLbjuj5Czq9DqICp/Oy+HTAd17ETtTpbI7L
- HtASYiwnv+tmxJQ2WBiqz6cZ78M6W+Zz3UN2uSr6Gquq/Jq+Y+BhjPbV+6Cv
- pttMCZj60nRC+vCsJnl/SAZiiZe+y3VfFJnktwWiinjgaUSIF/IXZmUdN8Vz
- MTFPWzMrx/Hhgng8M+sGRwuqNbtYe+Ug4hmGVNNbnE55SN2+6eoZz3Y3WIFC
- ovXxxhpBvf5IVEVvYHnTSEFI5F/XNZBKktMjqQf8DAFP89EfzRz98Gg0MEif
- RIoVNidxZREmoQ9DaEyIH/1CAopLVgcu8zS1jU8MPWY/B37vgTvkiY0YobyS
- aDlus2SMdULymGfg//L99rq0R6a9NhH7UxuXqeUWznHwGijnyybUfDAsfIwp
- LXoxmpT9ufn1pvOE9TYsPJxyJcv7QZq2EVR3nL/4l2O2NxUzJWtykXrKbBia
- oBFSDXhotMd0w6uh4eS13BWb6HqHjReD7w+6exPQ5uZIf1RBxAmSke2+tAg3
- hCHf8i2uRwA6DnBNgm0ORmuI+RTh9tCM0nRcDpusLwPbFk3UHgvE0W7bxb3h
- WchznGDUCgqKH9KWbC4RPFI7zCDjE0I1k1Fpc9T0qfGyjIA5Hc7KVWsl42v+
- NVsFdzN3RZRfv67NQxhl8RoniXF1sWin5XcUN+tNbB7cvCPj8sj4bU8rrQao
- +c1R01exRvMHA13ry3haQj3rKX8T+e6QgqAlOfdnst+UpE2DBtaDJwReQBjf
- 3wePiQ2CN+tvdK89qzdIr6CLnuzSFNP+ZLpJhiP1fKV85Dnoqe1TSqFCSAR1
- RVBsC17ZXkM6px76IcrOqjgLJmwxfAa5VyylkXsOon6UJ3l1EDDGk2KrKyOT
- iHugNXTY6azUF+G3ASWs4lBlEHn6FDYuXOCd18zGKnUYU0Ql/f0SdCTwg2Vl
- 8GErdo0GMqcz2FUBvlRy1Ydt1nM+AOHb2GbciaD876/VTebUlPGiCOhtYNop
- qnH/BCrm60ulv8l9y69E/9gclWuzJxNJEAChxPpbzV+sSgbPK+BDEey18aGo
- YqD+7VGmz1yPxOdgUANFgJeWIksafJFRTrNZWeDYJa9Iu1ZMLk31+O6gJ68Y
- lZjHjGommjPd+hKL+TG72k2XDqPNDfE7JQMoDwa/rKQeSzvf/j4rep6N75pQ
- huAu6YafNhB8IBwK4oljoITzHVxzpCAP/Pis44IKOkbj4/HWQmJH/IQXmMEl
- /02OqZvJJOgkpUGYrsJud+ZAATIhpZwb8JfQMw6mes/6aPdGCZjMJaHPgFjU
- h6Q0uA==]
+ ENC[PKCS7,MIIOPQYJKoZIhvcNAQcDoIIOLjCCDioCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAo+kOuakLJWl4gVaTboTX9JodKuNNtKTTFQk2
+ bDFa3brAitjmvnoNsX27+Qi+JCQJ9fuqCI1pkdiWDP6iXB5XORFLXRCUBLCA
+ 5ZNf2me3u8SYgxOH1yVo7AgDw8J6bYqQwcecTm0y0DkmZgEQBryZJVHe6CPD
+ 7WqBwJreoYI6z/AMoeG9GAsa4CjziRvBTfbymXYtjO3prssRaCQ0rXHiD6JU
+ 5a90YZm1U2/VwqwjWpTgYFD05hIHCtyD5PNlB8xd+S9sFRsRkRAFIUXkGIfI
+ 6fjXHe7Jd5bTxMaKIaZmhuxqf4XEqf2qu0mMd9134XzhHJud5EmnH4HGjuIq
+ NRvCtDCCDP4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEAWjoyge8WbAplaP
+ 30tTCheAggzQ1xj7c23DNmkfATMVVBXlMO29wiov/MncD8zumAY+Jp0g+2Y0
+ z7sN6TJdcFMWgEf1+6TPtZnIfWJ04TmpnYEaZd74J+xbUqKEakp56A2CdKdP
+ wf8oiWX5FD2zvU7irXuU6G9k7eCn9K71gNXDrlEw+roKIZskPo1jVhGNRg/U
+ Hv4WaticAlEv/txJJKCyQOSz4H8msmV13jKa7yLruM96Pm+AzxEk4NaV/DEB
+ FS2dvDIQYOXaQZfKMNKSgutnaKeUuyw0VeCMY4y5iRkHGIGJ91iy6KmSa2cS
+ R53o9CMpFcN9LUhMAvNdB8ZIv5qFapndIqjZXa+wSS1ixKoOa/1uXpPcGnDs
+ drx0N7NeN8J4/TqlkAFm2Ga2ehjxVGCrN37jH6Z3cr9qFF/1x40ujuSaCI9/
+ eC3gZNwowQOzqfINkZdXW/MLmAFeKm+2Bznh/syO2cb8n0TK0hncrf6sqA+k
+ JTCYvwqoTDHiWWkXJ7u5uGTdbIxl1H9LPgJpRqNK7G7BItV0Do20CG+uKEVx
+ gMlA743kdPjXZ4GbPPtSVbS5iEhfHo0IGVb8mQvNeye32NfT1QsgkNT9NNFK
+ U2aFiROwYJGYoJ5zcth9HXMLInjfOggdvZM0DLKz65p8Hob5F3sNhZrSyFEm
+ MEFYS8fsoNVdfmkBZ8JA8nHYOAaUMqmhhFDIn4g3Mnb7kGur+t97C1MzsqOI
+ lqz8Vdhm3gqL/UKZp2NoPIyH1cTUACtpOXz8nJY25QJdEyhzgkX7UnGCRRuz
+ Ev8dPZFRxNwuNO2N7ziDijePK9/VT9iK3CKb4gH8l/Zx51x62mUSGXEnNj6b
+ Wwnde/o3acqGUF6qvyzeBHelDoSEC336zzCRyut0bGJD3P5zgmNYJ9WUQfph
+ n2FdLv1Ddy9m0o1W+k0AUjKg+/Tfs/0Cw7Ma5EaykRvhP57HyteVCCwJIbhf
+ Tf+8A3hw7lGwtUcTaclLs9o6JOhMzepWsigr/M1p3Ec/yjhORMCph7uD24UV
+ cz2sd9BZhPUHi/NpBUt+KlxyRkwZzFfX8yKGzzp9kgO0EOcjKNq2tFfTY6xn
+ /7Wu6tCp2DPFV/SZUcvF5SYuh2RSNBotj/BcGnY5/V8FACHxHLI2WCKCBHPZ
+ 5SMx2JXxzg975HO5v6RK8gKiF//znG5u1U3JuS6NhGq90/EbAhhvF+LoCb6E
+ dyWy1jWWOvrWAOa6nGxP+55wdQUGpgey2bADp9lhPKcAMyJz/VOt16tpmyOJ
+ 565ykWISRIk3zb9pffTnlJGqC/zEDN2IBydQ5cl7b1wK5pZWLBnL4De/14T0
+ 5TWcZOYXd+xBdZtBi83owAWYFts3MD1RCz40FZJRkbj7QPalkDDFR32XQQW3
+ oPuxpNPwwUGfv/m/w2sIVeTSD4r6iEnYQreJ9xGHU7shErFjSWbYVeB/6wL+
+ Ty4PCPz9JaqDQgECTy7gNBNyw6n3ucVrmIhnEbN6tk3c8ehgWspeDgI9LNfx
+ hk0fUJLUBEnm/TINGolSdAsQSe/fZcOfq5L26SvSzJFlurFmmkaM5nF9kk06
+ cvLqBdHOIEo1uHZYnlU+qETdsFcWo5ZrA8EN0j5s0XxK+yZuVgah3uPZ47XQ
+ VrYJhaXTfSz0ybjiQRcteuivs/+wii6cfAoM9KZJoRSfNFgBpDvbIIHaWxci
+ DIFhw1GzPnpB71eeGkjm2XPSf7u23iXTvTUYYVbsaU/z0DjUFz21Y+oKH4zy
+ oUw0u9qa02Kvhk2YbI3xVDiMTkdd1coNW2wsW0nup8e0iU5epBAC9GV9IE3y
+ BEhjsV0ojuh4sItlFOdL9/vWqu0rbYZo6ObTXkWUKb+rbVHpj+bX4QyofOoX
+ BTndKhhtc1k4hVetbiSEG+MnOWSBZQN7CRHJT4/i4s7N21IvHBR2aowR7xNy
+ FayoipaGffhmJ8IFlevIJytCfc0/2vlRZ3h0pib6K8UaVqNMqkdlMGpSmYfH
+ M+SzqDTQhP52Rrsw7TVI8luE+j3G56XkLIzIsFeCN0ImV+LkwZ4xC8kurWs6
+ HqioS5xeiZJupMs/YKek37sUuy/1ODL2t30JbHaPLRffvlb6H3eJoQ6qFVI2
+ YzjwLWGWotrMduOONpnabSk/466dDgMmew7wANuTqPuD37uf34tqNVrAcmLi
+ +Nh2Cl6fve/ESlptDMDDN6ThpXXIH0+OAOYBQlqFu5VTfJth4/g8k6LJBDRK
+ I4ulySlVeENgQKTXvzcUpOo27xfdm4X9O4xU6CqOvtvirSuYzIodrEY821/F
+ ZCBteES9JcHiBlwB3ku6BUJuIfUqWajafVHyc2iHdTylO3PfoogATomG44gX
+ zOWsY0hM4WMV7bv50cGBVVZT9xzFoWdKBg9zn6dflMS4DapdrRaCiZ24YnRA
+ RElTOthV4a4nX6dlbPHXnb2kVSvQD3sIMKGwI51nnESoU9hKXnaKnkMNkmVg
+ sUDri3G52aJ3Plqy62x62DMQoHEkNriolK5nX+kNw/Yg/wNje6rQ4SvEkjCf
+ 8VNsC/flbh6T/dP2C4uXoC+AwxCGx5l97WQWwrJ8Xwiuj1f0a0O7dv55ZbJw
+ AkwQRf6NHkWorekw+84wY6IOAQ3nK/vFj2A/Th6iszdNxu3i4MrxmTw/YWw4
+ eDgqV4nKAq2wz1q8xH5p8kjwcY46w088kHJoHllyheLhRlvaLsfIWKdHeHEa
+ aImSDrcOE/jjqjR7e8VOiP8Vjyc1NaxWQvHrFQW/X+MfcWvQdJ2p/oEwCQDE
+ mUZPJcddWqI9AamHlA/CsKJ56jqwqz4bGJMlqMqfAbdV8xDlWr9tbDnWectn
+ a8LwX4FXe0iMCpR4umBDtlFo23N8g6FRt9WZyBTBSoZlZ2Xp/UFO8TqEG3Ol
+ gVH3i9R7Set6o36kdhIUKSvsXt8vvO91HmNUmk24nhzQRwxrkL40RxrZh67O
+ RqwBWVTSW3xBaSz1RnVAmN6FxRL+qLWt5O4RYK4I9YgxZW+PQzVdyVzpUZGm
+ Q/GP9TcZN3723AhFy2tbRfEr/eHhlaSEB6ZuFMGkQ7ROn5RNdbwqex6B/wg8
+ x+y1RFOkEILgPtyJR/z5allWhaLbjuj5Czq9DqICp/Oy+HTAd17ETtTpbI7L
+ HtASYiwnv+tmxJQ2WBiqz6cZ78M6W+Zz3UN2uSr6Gquq/Jq+Y+BhjPbV+6Cv
+ pttMCZj60nRC+vCsJnl/SAZiiZe+y3VfFJnktwWiinjgaUSIF/IXZmUdN8Vz
+ MTFPWzMrx/Hhgng8M+sGRwuqNbtYe+Ug4hmGVNNbnE55SN2+6eoZz3Y3WIFC
+ ovXxxhpBvf5IVEVvYHnTSEFI5F/XNZBKktMjqQf8DAFP89EfzRz98Gg0MEif
+ RIoVNidxZREmoQ9DaEyIH/1CAopLVgcu8zS1jU8MPWY/B37vgTvkiY0YobyS
+ aDlus2SMdULymGfg//L99rq0R6a9NhH7UxuXqeUWznHwGijnyybUfDAsfIwp
+ LXoxmpT9ufn1pvOE9TYsPJxyJcv7QZq2EVR3nL/4l2O2NxUzJWtykXrKbBia
+ oBFSDXhotMd0w6uh4eS13BWb6HqHjReD7w+6exPQ5uZIf1RBxAmSke2+tAg3
+ hCHf8i2uRwA6DnBNgm0ORmuI+RTh9tCM0nRcDpusLwPbFk3UHgvE0W7bxb3h
+ WchznGDUCgqKH9KWbC4RPFI7zCDjE0I1k1Fpc9T0qfGyjIA5Hc7KVWsl42v+
+ NVsFdzN3RZRfv67NQxhl8RoniXF1sWin5XcUN+tNbB7cvCPj8sj4bU8rrQao
+ +c1R01exRvMHA13ry3haQj3rKX8T+e6QgqAlOfdnst+UpE2DBtaDJwReQBjf
+ 3wePiQ2CN+tvdK89qzdIr6CLnuzSFNP+ZLpJhiP1fKV85Dnoqe1TSqFCSAR1
+ RVBsC17ZXkM6px76IcrOqjgLJmwxfAa5VyylkXsOon6UJ3l1EDDGk2KrKyOT
+ iHugNXTY6azUF+G3ASWs4lBlEHn6FDYuXOCd18zGKnUYU0Ql/f0SdCTwg2Vl
+ 8GErdo0GMqcz2FUBvlRy1Ydt1nM+AOHb2GbciaD876/VTebUlPGiCOhtYNop
+ qnH/BCrm60ulv8l9y69E/9gclWuzJxNJEAChxPpbzV+sSgbPK+BDEey18aGo
+ YqD+7VGmz1yPxOdgUANFgJeWIksafJFRTrNZWeDYJa9Iu1ZMLk31+O6gJ68Y
+ lZjHjGommjPd+hKL+TG72k2XDqPNDfE7JQMoDwa/rKQeSzvf/j4rep6N75pQ
+ huAu6YafNhB8IBwK4oljoITzHVxzpCAP/Pis44IKOkbj4/HWQmJH/IQXmMEl
+ /02OqZvJJOgkpUGYrsJud+ZAATIhpZwb8JfQMw6mes/6aPdGCZjMJaHPgFjU
+ h6Q0uA==]
profiles::nginx_revproxy::virtual_hosts:
'community.cacert.org':
target: http://10.0.0.116/
diff --git a/hieradata/nodes/emailout.yaml b/hieradata/nodes/emailout.yaml
index 786796c..053ae32 100644
--- a/hieradata/nodes/emailout.yaml
+++ b/hieradata/nodes/emailout.yaml
@@ -6,16 +6,16 @@ profiles::base::admins:
- law
- jselzer
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAZIzEQy+6GH01XZC/CDjTYDy/cMYuu5gD+M8p
- j7Y+QHXLPCJ721S/+PyWcQy8eqlPDMiz5Mnu4TdCfodys4VgnCTUj3vh7DKM
- F3cI0xkoEB7tBEXAnCQqPYaYa+KO/fj+kvdswghrnVaiSOiVA6rTGAS0q8/d
- bxXRplqykmKpIapqKcc5vWy1Tzw/MgEGa0jJsKeAQYK4XW7/RzmV46OODTfI
- kF/A0mGIPHF6wKf6gPwcWNXIt7uUtKIzFn9UYLA6kRnO3PMTNZJtmopj0dYZ
- d3Q8+Fnn1j5euYNtt87YN4NcBYBmoNW61GcK+22sks60DrdiILipuhdvcm1H
- x8gwbDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBZLIN+Jx5fPCvJaclk
- h87LgDDL8p9rEfdTEtFIy1rREoqV9TIRLiByXGaiTjo/vWU8sojsGZ1OCJKd
- RStsSa5Pjok=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAZIzEQy+6GH01XZC/CDjTYDy/cMYuu5gD+M8p
+ j7Y+QHXLPCJ721S/+PyWcQy8eqlPDMiz5Mnu4TdCfodys4VgnCTUj3vh7DKM
+ F3cI0xkoEB7tBEXAnCQqPYaYa+KO/fj+kvdswghrnVaiSOiVA6rTGAS0q8/d
+ bxXRplqykmKpIapqKcc5vWy1Tzw/MgEGa0jJsKeAQYK4XW7/RzmV46OODTfI
+ kF/A0mGIPHF6wKf6gPwcWNXIt7uUtKIzFn9UYLA6kRnO3PMTNZJtmopj0dYZ
+ d3Q8+Fnn1j5euYNtt87YN4NcBYBmoNW61GcK+22sks60DrdiILipuhdvcm1H
+ x8gwbDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBZLIN+Jx5fPCvJaclk
+ h87LgDDL8p9rEfdTEtFIy1rREoqV9TIRLiByXGaiTjo/vWU8sojsGZ1OCJKd
+ RStsSa5Pjok=]
profiles::x509cert_common::certificates:
'emailout.cacert.org':
certificate: |
diff --git a/hieradata/nodes/extmon.yaml b/hieradata/nodes/extmon.yaml
index c25626e..dd79b75 100644
--- a/hieradata/nodes/extmon.yaml
+++ b/hieradata/nodes/extmon.yaml
@@ -5,118 +5,117 @@ profiles::base::admins:
- jandd
profiles::base::is_external: true
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAKkrkXNGDfVW85jlLRp7t1KsHr7fzVZUOiKgI
- nXxfq7bf6YceZhwDM4h02X4ch+amxI/q3jvrrjgUAGLY0D5zonWNbA7T8zps
- fogr5FhzJzS47iQbHDyTmU55xOCjfujvdoUtiBLpeh1IZ8DR5fOgMqpt9Y4M
- LnSVsh5cnWdWlYq1/sdG7hm70QzTYZMVy3noNSfVPeGJRx0iTDpyvEhfV8+P
- NxAzNKpcmIf2UGUq7MxaAyjcayfpDwYXvH48o72vzvreY3KbCkBe8eBtmmGr
- beIWk3uF1/HGex0nMJLGKV57NdSrKz8I7moYp5pGhr70W2SoQFW9EHH6RSNm
- IdVtKzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAZdHtu1JgImxyR3tiB
- 9Iz7gDAdG7RekYIvLTmxoQxapU0ATmqM8lsDrFs1fy8LRz4T921fD8FqiC7x
- EEWxfzNn0ZI=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAKkrkXNGDfVW85jlLRp7t1KsHr7fzVZUOiKgI
+ nXxfq7bf6YceZhwDM4h02X4ch+amxI/q3jvrrjgUAGLY0D5zonWNbA7T8zps
+ fogr5FhzJzS47iQbHDyTmU55xOCjfujvdoUtiBLpeh1IZ8DR5fOgMqpt9Y4M
+ LnSVsh5cnWdWlYq1/sdG7hm70QzTYZMVy3noNSfVPeGJRx0iTDpyvEhfV8+P
+ NxAzNKpcmIf2UGUq7MxaAyjcayfpDwYXvH48o72vzvreY3KbCkBe8eBtmmGr
+ beIWk3uF1/HGex0nMJLGKV57NdSrKz8I7moYp5pGhr70W2SoQFW9EHH6RSNm
+ IdVtKzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAZdHtu1JgImxyR3tiB
+ 9Iz7gDAdG7RekYIvLTmxoQxapU0ATmqM8lsDrFs1fy8LRz4T921fD8FqiC7x
+ EEWxfzNn0ZI=]
profiles::icinga2_certificates::certificates:
- -
- name: extmon_client
+ - name: extmon_client
key: >
- ENC[PKCS7,MIILLQYJKoZIhvcNAQcDoIILHjCCCxoCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAG1qZ5pPhQAQv9ghCMKaDPplIln6/YnO2/qvH
- 93vQPs5MMxuX43jlio12HyakQ2S9pn7EjQFd+rRKNMwIw84472DgpXrvZq9z
- hmIVar+2Tg15+7cWcPf2jGGmLesCH95o1v4uV667fXrUbOCowMQfG+4zGsnV
- Qo+n9pe3CnvK0HyDNDj1Sd7+mjum6cSUbt9pnXZy7G+Q4XYzu+So1CoKmhdY
- c8pz/o48ALeOjPT5DOIni87b/rOtclldATQtgtksE8CCA5jC/hIk3LaMh9wi
- J15NKxy29U/zoMLsWfYQn1/5aIgHuPeV85lz5Eiglue+rCxikpmfsx+L+ZPM
- G8/zBjCCCe4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEA1+ZW6MTau1jUPA
- FrfiXqSAggnATj/0QSn1fjaYvsQJH9dV3imq+vh7+scp7sFAzzwEKMOABaFm
- hgUPQQjuJ/CD/AYTdarGMqI860D3vDE48RoqFSxW57FB3ZAqANigzZg0k+TY
- X82r1Yq6qdZ6StuiokU97OHFbKd68i7Ibf0nm4XhaZ8JKvti+xKpJxaLY5iL
- KGcCIQbZE7QOmlpIDEUFYdVX9jbV+9NJNo8F7jmSvT7ZI1gU46PapPoRKQun
- +Ka8Fw3BncTx14IoqDJgzfXpdqLLB8sXEcCbUF4uLBcFi76dkw2be93x32RZ
- UoajUlY4q4OFbGrtQSEvQ2uEI5iI6UmPnN6u333ddmH5NvW7Iu+pCc122v4b
- VKR0DBGhsasvKNyxnIk5u7cYV6azG6tKTTsYoNMkiBqgEGuLr6FtZKyaqtri
- HYGq/tiq8AWlMtl9hSEKHePwng5RDiRZu3K1Ux4m93sf7dyw0PrQxv34OlxS
- QMDJeMqmUMyF9iwDCs9h1YWgHlSpUbtpw9CiVJMu6mzxjNBIwnKfhq5L+nCQ
- c4nDXkzvYQN/KA4wUl/+76IPKo2fSLWtkbwOPDCmjojbSIacIORgzl9zuA2t
- j8n7QDPtFxEoC3Hj36XlYQlPITwGb0Gu6DhIOYt5rYo7IjNGglSyK6OfFFOb
- WiSmaJaUCrpCWpgaASOZdLFzo6oav7WDj74yyiV+eLziTqSnn6caBJ6eKrXh
- Fjue4rwqNX4fF8P4iu0NoxJDkiK3DsDRPHpRpJM8LLIKgiROJccWrOX8O0Uk
- xlLyMI97r4vnX9R2pHPSGfsA1OwJHOKPC+dld9edFzuqy/Wt9MAQI6xyYs1V
- kGjHA1DGxDHCMTaOUm3gJ3CZg4FU0A7RuqUjNCXHydCfE4kv069xVgfvfOFt
- Y/dEnON+iJYtWjmAr2nYkDHYfD/l998W0W7D2DuvhzhtYZsR8A9dwWal8vhQ
- e2rh+Rev33DiuC4GfOFXY3BBEsDjcOeRu7SnN43ffkFwnc3cS43oaFwF7Qte
- 6NkwvmXgV6vguDSSLdcUtvjkiog4PlgIRLiEyxhmA37yLNhn58r8KnY4+GX6
- ELGwbWY/Tkx42EGbiidTUD2Mudg8O6lOyThQo7u0p2fxw4v8jhI6HxUmWbXr
- hVlivhznMuFjleU3BFPEO/U2p4CjiwBoLnsJ78f8EOGurS1bA6nAZoFKdzS+
- IkpXNrwlXZY1TiTUpxTjJQOJi6kmiDsM4JlqwghfOmn2HVC0CFMgq1BQMJCq
- E3pzAWBLNydJXlCQKr+jn+ddKjEK6Lbi9ksnltfrru93ieU25+aCNwiPd2EV
- NCC6Z+KPBJykt2CEcuDggK284qBLdzOTZEF5B30tPlRnoJAAC3YfwCTktqp2
- ej71uEjEXrm9iZX6EQmVJojjjIkWeASmmB7rR/wMVsMwG0Pcz2xgtvKQ2pQm
- wXaZcbBQPuyMDuvZQFCmU+3fbs5N38gw2QSqklmH/vKdzFP3h81ZSnnhrE1P
- VlPnsSjgsuoj0DEP7LFQ6AbkMOquwnwidQpYZQlRLP9tX6wzSS9d3pTwcqkK
- KlYMYDXQF1acQM0DC2dEX9NzwqPbeWEbe/8HrRdMc2B2pc1GXJcHmQEkOP8m
- 3FNCU5uqJVzmRVL2aFJfTPhgb7zzOWdzwTHDJ+4PKGFu6ILbYsztkAgLYAOS
- I2tlOYd7D/WJT/n+rO0QWd4I1GbS2kK5IYMMexRgi7DhpvRCh92qJMgPCcoc
- /0kVHE/u/TLxgJ7qcPjUDfYGir3Bhna/3G3LCZDZ8Kw921iosVVTYAnoIa5P
- G7Bm2guZv1o8QerMxTdHxEBmT/pEYpKvl9BrTmTZcMPfxInhfVCAyspCTBI5
- 0zC+QNrppDweVzaFoFyjk1Taf5/1dzUkQstUyhP+uJ8Hq2d7pvBjiVXRnRB0
- juQ3zNtwXxOGE+jBZCNC5xWL/5ooT5yclBRo7typGI/NLIm8EW9Dr60T9elE
- s8dtTDROf5Mitd3ZPyBKe2qc7OvzTey5IbiIFYPIVzt696vrm689uw4Cl8Vy
- 5Jqb3kFNtgfZEZW4wnidxoBGwqMPVRFWbpHNSvPnS9HW2u6y6SGs2nuWZvcu
- lB+J5TNVeAzPw81OELhZZEmAOX/rcL/oMvAudUJlRFYVZY4z+tvFLbDP9Hzi
- Do9ykUApp9ljQ1XQNDyKIISv/jJKEEy16rb7HhdSs8uwtZ6mPD1QaNq8uO5b
- FZY4c7R3EJue5n6mpGJ97Z2QijnEh5NNw9Yt10K6WES3/7JBDjt0OjQCnbaF
- 64garOvcHKzbpLhHhJtQ6vjxAKV1Q+HzVohOJKDZBJDP8f8xDIwXfVjVMlx8
- pjLQ6pjIaYKD8beKyJMd2IHrXb8IUs0AQIKHL6dGH4pgYZ+Wr9VVktCf1GR3
- 2IB4j8b3lJ4AjqTuGWrVAoxH4FkV8J4mJOq34RkE3V0REnurIodjZKL1LW1Y
- CKzgIi6TUlZNFRBn3+/PLPnHOF0SXOgbiQv1ikLReZGkDeBAx5Jieb70ewIz
- eawLyRRtwInmrOV4ajszSfarYRkh8ulN6AwcF8AVJt2cxx2iXcMoEHQBbcVs
- VT+MxTfLRde61Nc6lMWyfsjkvptIyLc7MkErrPYXo/psJGwvjJw70TEHiKLQ
- Y+X/hZ7ESj26bu1oiBGGD+4v6CMo4qa3RnKcvHyMbdgNccFbWQktZ0kjvQGA
- MWoz/8jdz61tA+tlokM3ZEkWclrJEcyQG8N1gYM/ER9pZBuM6PWZZvp4Yfxw
- F5Beu2pgJ1HlKaePwtm3itVPwuIm7K57YEyY76912L+GYiAPpvXt3B7ijCiX
- kpHTUw9U2yq2R2zT1zgVePUA2pa379QmBnH1pwzfOzlU+4zli2qSlBTJAibR
- LW1afjWaarigdwbDkuxVVinB/SM/U/7jQgXnCQIeVmteW2crwvH/rtfYCmja
- ffmJCCsjwDL908TcpJGTFtHxKyGrseMWSqgjlQw1mqmbOU//8DXzNUIn/AJj
- p/h7NmRwDQbDnmoZApNGrd9ZiNzlO/nxCD561qD4FPOmSRAIJhQuFjTfompM
- U3gNYE4cGPlbBHP9O1YHWfbjWNRqgZHYa772yEJ20+4HIa0lcNOCjCqm/NPB
- 7Irj881O9z/hZRWLpHW/MAtesZNe8XDjgXAs5gsYmsYHBlZZ/dP6Pwz0qIO/
- V8FVDMyMLDkJMgAKHr7F+DMzCPOsA56mdPqhHnhTIKIpBTW0R2wPWMomVg7c
- vTtI+ddYRIYMdBMgaWN0z9IRWR1PFlQ6aTVGdxTBJ4gf5k8ITtjdykssa1dS
- 8ObTnGjMEyiHGlJmK6cm/EYXmOOj8p2HPoBQrqSk]
+ ENC[PKCS7,MIILLQYJKoZIhvcNAQcDoIILHjCCCxoCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAG1qZ5pPhQAQv9ghCMKaDPplIln6/YnO2/qvH
+ 93vQPs5MMxuX43jlio12HyakQ2S9pn7EjQFd+rRKNMwIw84472DgpXrvZq9z
+ hmIVar+2Tg15+7cWcPf2jGGmLesCH95o1v4uV667fXrUbOCowMQfG+4zGsnV
+ Qo+n9pe3CnvK0HyDNDj1Sd7+mjum6cSUbt9pnXZy7G+Q4XYzu+So1CoKmhdY
+ c8pz/o48ALeOjPT5DOIni87b/rOtclldATQtgtksE8CCA5jC/hIk3LaMh9wi
+ J15NKxy29U/zoMLsWfYQn1/5aIgHuPeV85lz5Eiglue+rCxikpmfsx+L+ZPM
+ G8/zBjCCCe4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEA1+ZW6MTau1jUPA
+ FrfiXqSAggnATj/0QSn1fjaYvsQJH9dV3imq+vh7+scp7sFAzzwEKMOABaFm
+ hgUPQQjuJ/CD/AYTdarGMqI860D3vDE48RoqFSxW57FB3ZAqANigzZg0k+TY
+ X82r1Yq6qdZ6StuiokU97OHFbKd68i7Ibf0nm4XhaZ8JKvti+xKpJxaLY5iL
+ KGcCIQbZE7QOmlpIDEUFYdVX9jbV+9NJNo8F7jmSvT7ZI1gU46PapPoRKQun
+ +Ka8Fw3BncTx14IoqDJgzfXpdqLLB8sXEcCbUF4uLBcFi76dkw2be93x32RZ
+ UoajUlY4q4OFbGrtQSEvQ2uEI5iI6UmPnN6u333ddmH5NvW7Iu+pCc122v4b
+ VKR0DBGhsasvKNyxnIk5u7cYV6azG6tKTTsYoNMkiBqgEGuLr6FtZKyaqtri
+ HYGq/tiq8AWlMtl9hSEKHePwng5RDiRZu3K1Ux4m93sf7dyw0PrQxv34OlxS
+ QMDJeMqmUMyF9iwDCs9h1YWgHlSpUbtpw9CiVJMu6mzxjNBIwnKfhq5L+nCQ
+ c4nDXkzvYQN/KA4wUl/+76IPKo2fSLWtkbwOPDCmjojbSIacIORgzl9zuA2t
+ j8n7QDPtFxEoC3Hj36XlYQlPITwGb0Gu6DhIOYt5rYo7IjNGglSyK6OfFFOb
+ WiSmaJaUCrpCWpgaASOZdLFzo6oav7WDj74yyiV+eLziTqSnn6caBJ6eKrXh
+ Fjue4rwqNX4fF8P4iu0NoxJDkiK3DsDRPHpRpJM8LLIKgiROJccWrOX8O0Uk
+ xlLyMI97r4vnX9R2pHPSGfsA1OwJHOKPC+dld9edFzuqy/Wt9MAQI6xyYs1V
+ kGjHA1DGxDHCMTaOUm3gJ3CZg4FU0A7RuqUjNCXHydCfE4kv069xVgfvfOFt
+ Y/dEnON+iJYtWjmAr2nYkDHYfD/l998W0W7D2DuvhzhtYZsR8A9dwWal8vhQ
+ e2rh+Rev33DiuC4GfOFXY3BBEsDjcOeRu7SnN43ffkFwnc3cS43oaFwF7Qte
+ 6NkwvmXgV6vguDSSLdcUtvjkiog4PlgIRLiEyxhmA37yLNhn58r8KnY4+GX6
+ ELGwbWY/Tkx42EGbiidTUD2Mudg8O6lOyThQo7u0p2fxw4v8jhI6HxUmWbXr
+ hVlivhznMuFjleU3BFPEO/U2p4CjiwBoLnsJ78f8EOGurS1bA6nAZoFKdzS+
+ IkpXNrwlXZY1TiTUpxTjJQOJi6kmiDsM4JlqwghfOmn2HVC0CFMgq1BQMJCq
+ E3pzAWBLNydJXlCQKr+jn+ddKjEK6Lbi9ksnltfrru93ieU25+aCNwiPd2EV
+ NCC6Z+KPBJykt2CEcuDggK284qBLdzOTZEF5B30tPlRnoJAAC3YfwCTktqp2
+ ej71uEjEXrm9iZX6EQmVJojjjIkWeASmmB7rR/wMVsMwG0Pcz2xgtvKQ2pQm
+ wXaZcbBQPuyMDuvZQFCmU+3fbs5N38gw2QSqklmH/vKdzFP3h81ZSnnhrE1P
+ VlPnsSjgsuoj0DEP7LFQ6AbkMOquwnwidQpYZQlRLP9tX6wzSS9d3pTwcqkK
+ KlYMYDXQF1acQM0DC2dEX9NzwqPbeWEbe/8HrRdMc2B2pc1GXJcHmQEkOP8m
+ 3FNCU5uqJVzmRVL2aFJfTPhgb7zzOWdzwTHDJ+4PKGFu6ILbYsztkAgLYAOS
+ I2tlOYd7D/WJT/n+rO0QWd4I1GbS2kK5IYMMexRgi7DhpvRCh92qJMgPCcoc
+ /0kVHE/u/TLxgJ7qcPjUDfYGir3Bhna/3G3LCZDZ8Kw921iosVVTYAnoIa5P
+ G7Bm2guZv1o8QerMxTdHxEBmT/pEYpKvl9BrTmTZcMPfxInhfVCAyspCTBI5
+ 0zC+QNrppDweVzaFoFyjk1Taf5/1dzUkQstUyhP+uJ8Hq2d7pvBjiVXRnRB0
+ juQ3zNtwXxOGE+jBZCNC5xWL/5ooT5yclBRo7typGI/NLIm8EW9Dr60T9elE
+ s8dtTDROf5Mitd3ZPyBKe2qc7OvzTey5IbiIFYPIVzt696vrm689uw4Cl8Vy
+ 5Jqb3kFNtgfZEZW4wnidxoBGwqMPVRFWbpHNSvPnS9HW2u6y6SGs2nuWZvcu
+ lB+J5TNVeAzPw81OELhZZEmAOX/rcL/oMvAudUJlRFYVZY4z+tvFLbDP9Hzi
+ Do9ykUApp9ljQ1XQNDyKIISv/jJKEEy16rb7HhdSs8uwtZ6mPD1QaNq8uO5b
+ FZY4c7R3EJue5n6mpGJ97Z2QijnEh5NNw9Yt10K6WES3/7JBDjt0OjQCnbaF
+ 64garOvcHKzbpLhHhJtQ6vjxAKV1Q+HzVohOJKDZBJDP8f8xDIwXfVjVMlx8
+ pjLQ6pjIaYKD8beKyJMd2IHrXb8IUs0AQIKHL6dGH4pgYZ+Wr9VVktCf1GR3
+ 2IB4j8b3lJ4AjqTuGWrVAoxH4FkV8J4mJOq34RkE3V0REnurIodjZKL1LW1Y
+ CKzgIi6TUlZNFRBn3+/PLPnHOF0SXOgbiQv1ikLReZGkDeBAx5Jieb70ewIz
+ eawLyRRtwInmrOV4ajszSfarYRkh8ulN6AwcF8AVJt2cxx2iXcMoEHQBbcVs
+ VT+MxTfLRde61Nc6lMWyfsjkvptIyLc7MkErrPYXo/psJGwvjJw70TEHiKLQ
+ Y+X/hZ7ESj26bu1oiBGGD+4v6CMo4qa3RnKcvHyMbdgNccFbWQktZ0kjvQGA
+ MWoz/8jdz61tA+tlokM3ZEkWclrJEcyQG8N1gYM/ER9pZBuM6PWZZvp4Yfxw
+ F5Beu2pgJ1HlKaePwtm3itVPwuIm7K57YEyY76912L+GYiAPpvXt3B7ijCiX
+ kpHTUw9U2yq2R2zT1zgVePUA2pa379QmBnH1pwzfOzlU+4zli2qSlBTJAibR
+ LW1afjWaarigdwbDkuxVVinB/SM/U/7jQgXnCQIeVmteW2crwvH/rtfYCmja
+ ffmJCCsjwDL908TcpJGTFtHxKyGrseMWSqgjlQw1mqmbOU//8DXzNUIn/AJj
+ p/h7NmRwDQbDnmoZApNGrd9ZiNzlO/nxCD561qD4FPOmSRAIJhQuFjTfompM
+ U3gNYE4cGPlbBHP9O1YHWfbjWNRqgZHYa772yEJ20+4HIa0lcNOCjCqm/NPB
+ 7Irj881O9z/hZRWLpHW/MAtesZNe8XDjgXAs5gsYmsYHBlZZ/dP6Pwz0qIO/
+ V8FVDMyMLDkJMgAKHr7F+DMzCPOsA56mdPqhHnhTIKIpBTW0R2wPWMomVg7c
+ vTtI+ddYRIYMdBMgaWN0z9IRWR1PFlQ6aTVGdxTBJ4gf5k8ITtjdykssa1dS
+ 8ObTnGjMEyiHGlJmK6cm/EYXmOOj8p2HPoBQrqSk]
certificate: |
- -----BEGIN CERTIFICATE-----
- MIIGUTCCBDmgAwIBAgIDAvEYMA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB
- Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV
- BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjEwNzE2MTYyNzQ2WhcNMjIwNzE2
- MTYyNzQ2WjCBrjELMAkGA1UEBhMCQVUxDDAKBgNVBAgTA05TVzEPMA0GA1UEBxMG
- U3lkbmV5MRQwEgYDVQQKEwtDQWNlcnQgSW5jLjEcMBoGA1UECxMTSW5mcmFzdHJ1
- Y3R1cmUgVGVhbTEjMCEGA1UEAxMaQ0FjZXJ0IGV4dGVybmFsIG1vbml0b3Jpbmcx
- JzAlBgkqhkiG9w0BCQEWGGV4dG1vbi1jbGllbnRAY2FjZXJ0Lm9yZzCCAaIwDQYJ
- KoZIhvcNAQEBBQADggGPADCCAYoCggGBANIdW3yyGH9LWYseNDIIs+DDHEd3HGOO
- H31JQKng8LdEZynotRISXDhCfI+Ys0yxMy/t6Sj9pphdoJLFpoTXUB23Hx55LYD3
- /DiUnoz9WXj0pqiiVKZFdEh1Uwb/M4LDXD4IalAnFpSz28CCr2/24f47e21y6xz2
- LLEIjFpWreBpk81Yceu1Hh+OAtabzs9R0DRX2hILfmb4QjnUNmmoSjMd4/kCShtU
- xSaKGKQ9TUc8fjmq1E5fmE6lbKkiwpIDNBIJeJCTo5tq3t6ncFt/L6Tv3gsCQUag
- lXq09Ca3jyWp6KzTB2sBu/8RFZaBgCcp8yJig89e07IfTqEJDKLzVqj49SMWtajM
- vv0oArXNQ0C5f8ZUNV0jkszopWqgEhDyso94Yuk5MPVcCPsq9UYVEMEuPFMNVVpV
- qq12MNYrWPySwQzsCAgAuEva8rrwmfrlUA17yhvdxRvp/fJtxq3f/5OA4uCT28kS
- gehoo41dTJtRdpx0BvbWZIIC2mzC4kHGJQIDAQABo4IBTzCCAUswDAYDVR0TAQH/
- BAIwADBWBglghkgBhvhCAQ0ESRZHVG8gZ2V0IHlvdXIgb3duIGNlcnRpZmljYXRl
- IGZvciBGUkVFIGhlYWQgb3ZlciB0byBodHRwOi8vd3d3LkNBY2VydC5vcmcwDgYD
- VR0PAQH/BAQDAgOoMEAGA1UdJQQ5MDcGCCsGAQUFBwMEBggrBgEFBQcDAgYKKwYB
- BAGCNwoDBAYKKwYBBAGCNwoDAwYJYIZIAYb4QgQBMDIGCCsGAQUFBwEBBCYwJDAi
- BggrBgEFBQcwAYYWaHR0cDovL29jc3AuY2FjZXJ0Lm9yZzA4BgNVHR8EMTAvMC2g
- K6AphidodHRwOi8vY3JsLmNhY2VydC5vcmcvY2xhc3MzLXJldm9rZS5jcmwwIwYD
- VR0RBBwwGoEYZXh0bW9uLWNsaWVudEBjYWNlcnQub3JnMA0GCSqGSIb3DQEBDQUA
- A4ICAQCm8BzJDpZtb5NgIsxKXKYKqkmhnEpRWuRlTgrAlK3Fj1NH6XSs+gJt4wNz
- HPMtPvJYgqPvDUgjujCV4ntMt/bta5HKaQ7l8Fol9n7fL2K225o0jA27ajDdNNAU
- CdZVGLkeQIS5EuAZ3jqt59TbKy5ZiF7zLE/h3LbXolykom/7pvmgKYjkIp5sKvKh
- gGndU+roAKejLaFgxCWX02DXC0qj31vgs81YM1i6D4UiUPP0NOoAPYms+9rezk66
- bF+pdZLclSoUPoral+qg/p7mF0+LaAxg5dptonX6mPIkRQPSmFXMWWmiqupyS3aJ
- Tg6pxPLoH5n1DCWRWmBeWbpNRgXhLV/hFdNn76kVZx2+NeOaJ+WkHMfc82cWUsqw
- 0DwHfaFEruLAK97vU8B2lnX7jvOXP5vTzPcp7X01EES9g0dkXsknBDJRPjm3h8A3
- v5A+zi8NuiBHXcEjfh/2XUXNEpai/ZVmjfg6XBlkGi7IRZHdQG6SJ+3FFOBXr7DO
- pjoj8eOUx2i3/Zc0E7eA2cnFpwlTcN9v+7yH/U76VxGpZw0uN5ZV6/QVcxrFsUER
- 5gCzDizhtDcTsX/4/6giuZ9AzaxGfhCTdI+4iq8txuX9bVPizgq36rICHA4NdF39
- IqsKlypGICER+j5yre6te+uuNhimIYbtpaalp9fArfOhxMDjRQ==
- -----END CERTIFICATE-----
+ -----BEGIN CERTIFICATE-----
+ MIIGUTCCBDmgAwIBAgIDAvqKMA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB
+ Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV
+ BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjIwNjE4MTAxOTE3WhcNMjMwNjE4
+ MTAxOTE3WjCBrjELMAkGA1UEBhMCQVUxDDAKBgNVBAgTA05TVzEPMA0GA1UEBxMG
+ U3lkbmV5MRQwEgYDVQQKEwtDQWNlcnQgSW5jLjEcMBoGA1UECxMTSW5mcmFzdHJ1
+ Y3R1cmUgVGVhbTEjMCEGA1UEAxMaQ0FjZXJ0IGV4dGVybmFsIG1vbml0b3Jpbmcx
+ JzAlBgkqhkiG9w0BCQEWGGV4dG1vbi1jbGllbnRAY2FjZXJ0Lm9yZzCCAaIwDQYJ
+ KoZIhvcNAQEBBQADggGPADCCAYoCggGBANIdW3yyGH9LWYseNDIIs+DDHEd3HGOO
+ H31JQKng8LdEZynotRISXDhCfI+Ys0yxMy/t6Sj9pphdoJLFpoTXUB23Hx55LYD3
+ /DiUnoz9WXj0pqiiVKZFdEh1Uwb/M4LDXD4IalAnFpSz28CCr2/24f47e21y6xz2
+ LLEIjFpWreBpk81Yceu1Hh+OAtabzs9R0DRX2hILfmb4QjnUNmmoSjMd4/kCShtU
+ xSaKGKQ9TUc8fjmq1E5fmE6lbKkiwpIDNBIJeJCTo5tq3t6ncFt/L6Tv3gsCQUag
+ lXq09Ca3jyWp6KzTB2sBu/8RFZaBgCcp8yJig89e07IfTqEJDKLzVqj49SMWtajM
+ vv0oArXNQ0C5f8ZUNV0jkszopWqgEhDyso94Yuk5MPVcCPsq9UYVEMEuPFMNVVpV
+ qq12MNYrWPySwQzsCAgAuEva8rrwmfrlUA17yhvdxRvp/fJtxq3f/5OA4uCT28kS
+ gehoo41dTJtRdpx0BvbWZIIC2mzC4kHGJQIDAQABo4IBTzCCAUswDAYDVR0TAQH/
+ BAIwADBWBglghkgBhvhCAQ0ESRZHVG8gZ2V0IHlvdXIgb3duIGNlcnRpZmljYXRl
+ IGZvciBGUkVFIGhlYWQgb3ZlciB0byBodHRwOi8vd3d3LkNBY2VydC5vcmcwDgYD
+ VR0PAQH/BAQDAgOoMEAGA1UdJQQ5MDcGCCsGAQUFBwMEBggrBgEFBQcDAgYKKwYB
+ BAGCNwoDBAYKKwYBBAGCNwoDAwYJYIZIAYb4QgQBMDIGCCsGAQUFBwEBBCYwJDAi
+ BggrBgEFBQcwAYYWaHR0cDovL29jc3AuY2FjZXJ0Lm9yZzA4BgNVHR8EMTAvMC2g
+ K6AphidodHRwOi8vY3JsLmNhY2VydC5vcmcvY2xhc3MzLXJldm9rZS5jcmwwIwYD
+ VR0RBBwwGoEYZXh0bW9uLWNsaWVudEBjYWNlcnQub3JnMA0GCSqGSIb3DQEBDQUA
+ A4ICAQBkwXx7IEeXNytbGtv6IQlvJz1tkpOz8asBgbtD1byQCO7JRUDblQgzap2y
+ rgeLZc5wnTYP3FKnzquXvxfkgfR7a40WPTSPpvrSXMY8/BUvlNgYVpYBjMxGsVCX
+ gW/vX2A7+vSgJLUkCYJL98ooT+kSmsh8Xs6rB2Jz8yCDC8Niu5jUta47YCviuvuN
+ Z6c8mNqrFV7MfRBBfGodl5a2djFzKYhgrPyaT01qr7Qa42wDOWs1Pl1uD4Z8m08N
+ vv51y694gnWMKAhM42AKAEMiybHJ+1eIV9sOkanBDjeCAM4/ugK5Gm29CnI5rNV8
+ VZMrksS/YiMZPPHrVrqaUHVceV0eqYRi1bmIRvaSBEEJGK4YF52qmBJmuszqBnTW
+ YZ8CkZCPOI74K1wpG1F/sgME1yu9WbxjnB3Ig3CZ/EqJmhf66cgsmnTbpOsabE8v
+ 5eIsyfAKlAcNRNGabDyRTVJsSlD/ISivTnoQsW1ay5bLkyHgmRgc9U4zvNeMBKWz
+ vJ/126fnc4tkzlk0SM+ntph3xKAaqEEZX3pchnxlNWohS+3T3c6lUA0YUsvC4vL7
+ N0VLPi3YcRzrvciSNXZTpTrYnKOWKW6DKp6T9AVaf0DxcAc3UvCQd0QOEhqKnntn
+ kvuUL+mj0ZV1h7F0/NUmtEb/OOt/Yt0LgiIYarfj2tKipgCDuQ==
+ -----END CERTIFICATE-----
diff --git a/hieradata/nodes/git.yaml b/hieradata/nodes/git.yaml
index dc34b90..f2a056e 100644
--- a/hieradata/nodes/git.yaml
+++ b/hieradata/nodes/git.yaml
@@ -6,16 +6,16 @@ profiles::base::admins:
- jandd
- law
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAicLOD4qZ/TcPgGkP3umuFlFULVt0+2Kc6cw2
- TtRS/9fBxBNykYPKIKwkCf1pvx4iZMHk+cCzmi2jJUgSual0AYMx5+Ax+tzW
- FQGYv8U2fzC8yCvY0xRMe/pls58rrUxVRN4EcFEa+NWIGiIM84ds5qdCY5SY
- g2hhJql3N1KPeO9TMWKvrQjL6ZKvHgOg71KrP0+TnYBUbZDRPnklNnvVCCj5
- 4i+l+pgI0H4eEO2vysI6xFwC8ntxOqo4rJTAmLypKvshDpHPdgWShnBtcQq1
- 4yxr5ZTY22pXD5k7cVRtPn4WyW8ackk3be4BH0AtUd4vA6Wx+bJ7qLw9kd/G
- yZSmjzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCJyEfssCaSbBwlVn8O
- qWALgDBDQ/V8TsmywwNNLfl37qfDD/xaT7aqWvhsZsvBl1Z9/go4u4gtxKju
- Ga7tgV79rn8=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAicLOD4qZ/TcPgGkP3umuFlFULVt0+2Kc6cw2
+ TtRS/9fBxBNykYPKIKwkCf1pvx4iZMHk+cCzmi2jJUgSual0AYMx5+Ax+tzW
+ FQGYv8U2fzC8yCvY0xRMe/pls58rrUxVRN4EcFEa+NWIGiIM84ds5qdCY5SY
+ g2hhJql3N1KPeO9TMWKvrQjL6ZKvHgOg71KrP0+TnYBUbZDRPnklNnvVCCj5
+ 4i+l+pgI0H4eEO2vysI6xFwC8ntxOqo4rJTAmLypKvshDpHPdgWShnBtcQq1
+ 4yxr5ZTY22pXD5k7cVRtPn4WyW8ackk3be4BH0AtUd4vA6Wx+bJ7qLw9kd/G
+ yZSmjzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCJyEfssCaSbBwlVn8O
+ qWALgDBDQ/V8TsmywwNNLfl37qfDD/xaT7aqWvhsZsvBl1Z9/go4u4gtxKju
+ Ga7tgV79rn8=]
profiles::x509cert_common::certificates:
'git.cacert.org':
certificate: |
diff --git a/hieradata/nodes/idp.yaml b/hieradata/nodes/idp.yaml
new file mode 100644
index 0000000..8cdc0a2
--- /dev/null
+++ b/hieradata/nodes/idp.yaml
@@ -0,0 +1,16 @@
+---
+classes:
+ - roles::idp
+profiles::base::admins:
+ - jandd
+profiles::icinga2_agent::pki_ticket: >
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBAD
+ AFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEASfyW90GZx59x9n47HHlEnkdZ+i
+ niLnTLC+oI8gfFPIH3Tcv15144flW2i0yZGezOrx7u45TB5Etat1xQHikWej
+ AIZnIOJ5EQSNbpz13tGFscC8jdt3r0MzCzdy9S/feyY7hy7Rp5e660ihBJYT
+ eLy+FbR+w3HQ7wBlpXaKB2qXHqBW2dap8iWAVFSqZLm0doZ6NY6vhhFi6JnI
+ gFj6QmUJuE2YyfsJBTl3+u+U8CaIVHwM2NnOXqNys57LUgfCWe3vEKn09tS+
+ 4lCT/2nuMykMjtSHnMG3JwhsrHs9it44sqRF4iviuYOx9hjRjt+oAqe0P8ed
+ kdo3U37c2JsLdLvTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAcAkuhaq
+ iY0ptYro2vaoRbgDC5RScVpxR1ZhQKA2jU9b7RcuV44fADXtPnWDhFt7wwNc
+ kM75ghXXnTtSsfA5gqsLo=]
diff --git a/hieradata/nodes/ircserver.yaml b/hieradata/nodes/ircserver.yaml
index 5dc4bdd..3aa88ed 100644
--- a/hieradata/nodes/ircserver.yaml
+++ b/hieradata/nodes/ircserver.yaml
@@ -5,16 +5,16 @@ profiles::base::admins:
- jandd
profiles::base::rootalias: irc-admin@cacert.org
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAHaF5dH8H7SFb1mKY8FWu3TL7MoHn2lk2V/1S
- kjM3nOJ8tSCSVLZLg+cE6dLZPS8rUp/UILBG2BqN1eg41pRdEJHSa/4XmvP0
- j8V2xWsahNnhMX6/NBHkNpiyC2iGTmhj0V+31QN9QOMRDfsStNeBgR/atw5k
- h20bpmlensNUeMOz5McoojMDFrshgPSp4kg1FNofr+6ZXiEGb4Jf4W1617k+
- 0cISAqQ9kfGOrUcvXVIFx+c2trzbnrnZpmVqXOq8xVkgK9LLLVeYPZfnPwxY
- 4SBjevfBjG5cmBgZvENiPTVEDWnv+9dETR68UiG+dBdbVdOuFP/8qJtpppW1
- FZPkIzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC6l3NsMeJypedfMF6O
- i2rIgDDlShiaPIGUL6kAk2yEPiIdPCt8J86QsLY+6OsLV0zn+wRQJGL+WY3C
- FbKij0dpGow=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAHaF5dH8H7SFb1mKY8FWu3TL7MoHn2lk2V/1S
+ kjM3nOJ8tSCSVLZLg+cE6dLZPS8rUp/UILBG2BqN1eg41pRdEJHSa/4XmvP0
+ j8V2xWsahNnhMX6/NBHkNpiyC2iGTmhj0V+31QN9QOMRDfsStNeBgR/atw5k
+ h20bpmlensNUeMOz5McoojMDFrshgPSp4kg1FNofr+6ZXiEGb4Jf4W1617k+
+ 0cISAqQ9kfGOrUcvXVIFx+c2trzbnrnZpmVqXOq8xVkgK9LLLVeYPZfnPwxY
+ 4SBjevfBjG5cmBgZvENiPTVEDWnv+9dETR68UiG+dBdbVdOuFP/8qJtpppW1
+ FZPkIzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC6l3NsMeJypedfMF6O
+ i2rIgDDlShiaPIGUL6kAk2yEPiIdPCt8J86QsLY+6OsLV0zn+wRQJGL+WY3C
+ FbKij0dpGow=]
profiles::x509cert_common::certificates:
'irc.cacert.org':
certificate: |
diff --git a/hieradata/nodes/issue.yaml b/hieradata/nodes/issue.yaml
index df043c5..3d77d09 100644
--- a/hieradata/nodes/issue.yaml
+++ b/hieradata/nodes/issue.yaml
@@ -7,16 +7,16 @@ profiles::base::admins:
- dirk
- dinoex
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAFvuCLRlXBmas6v2JGcKxy0NVvpc+hv/yNRqS
- SMokUDoNTi6nbZ1UrbGjZMCq+g/TUyW0SABEIuraEDoxzWfBJZXipC70e/Aj
- zg/XURpKxmRK5c/4ouBA/Ecze1jjDx476B4/4LyO/CK4G/2Iu2xdsDth3IV8
- FKV1GaPFAZlRk/hPphw1VNSyuZdYraT4Sbo7hJ6cvwE0w3mHNBgtTpProgoF
- hQQz2Wfr5f/YWaFvlWHVJtJYVssSvrcEZFNYaIvoBNcwow2QPtyBiv8JrUHz
- OESJpYQQ2jyqhliiCsTzn2v4AWUiCIk5Im7RQ/EIiAskrdMk3y7zjb+Ev62V
- aXn5/TBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBACg060g6bh04Y6SdMh
- kIYogDAio9Ev3971h+gUsvNpmeUh4oeSZTA0oQICRZAgGOOHVAiApKhLut3N
- uGBx4XT1fUU=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAFvuCLRlXBmas6v2JGcKxy0NVvpc+hv/yNRqS
+ SMokUDoNTi6nbZ1UrbGjZMCq+g/TUyW0SABEIuraEDoxzWfBJZXipC70e/Aj
+ zg/XURpKxmRK5c/4ouBA/Ecze1jjDx476B4/4LyO/CK4G/2Iu2xdsDth3IV8
+ FKV1GaPFAZlRk/hPphw1VNSyuZdYraT4Sbo7hJ6cvwE0w3mHNBgtTpProgoF
+ hQQz2Wfr5f/YWaFvlWHVJtJYVssSvrcEZFNYaIvoBNcwow2QPtyBiv8JrUHz
+ OESJpYQQ2jyqhliiCsTzn2v4AWUiCIk5Im7RQ/EIiAskrdMk3y7zjb+Ev62V
+ aXn5/TBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBACg060g6bh04Y6SdMh
+ kIYogDAio9Ev3971h+gUsvNpmeUh4oeSZTA0oQICRZAgGOOHVAiApKhLut3N
+ uGBx4XT1fUU=]
profiles::x509cert_common::certificates:
'issue.cacert.org':
certificate: |
diff --git a/hieradata/nodes/jenkins.yaml b/hieradata/nodes/jenkins.yaml
index 6aa0109..3e710a0 100644
--- a/hieradata/nodes/jenkins.yaml
+++ b/hieradata/nodes/jenkins.yaml
@@ -5,13 +5,13 @@ profiles::base::admins:
- jandd
- law
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEArbWeNESG9eVk3n74ofPXmFzRTV9pbZT65WaV
- ABMPRuaUgNIEjhMhk5xxEUUC3oaz/SM7rLxCASmjBMcNufBNs9/lQ4oXThb2
- q8HFHqcNhotpD/+IhPHbajrkopWDW4OR1JHcj8rVwG7UBi5MGn1WRcUAdH1i
- t9vqfQSuZbiWaCrAfqwxQlycOwpiCHum6xBTMB4s7ix1ADkkYjrEik9z+03+
- I5zU+kJgksrmwA49BvTIiA/fuVgAT5n0Yx5to6GSh+4Ax3aWn7auaPd9rDz4
- /2Me4Kr7vyST8LdqLnA1mgFXJJTPmXMNMVb6Yp4x4pDxvOh6bQvjjtdUoXDF
- OvwekjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAnSm0NhdNR0zRRTAxa
- CWvDgDDIHqd3Iz4xbCy1MYoSF51kW9MZmW7fhR4yS9nHeO9mcjduLxAjWFsZ
- 59ogTZ0Pz0A=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEArbWeNESG9eVk3n74ofPXmFzRTV9pbZT65WaV
+ ABMPRuaUgNIEjhMhk5xxEUUC3oaz/SM7rLxCASmjBMcNufBNs9/lQ4oXThb2
+ q8HFHqcNhotpD/+IhPHbajrkopWDW4OR1JHcj8rVwG7UBi5MGn1WRcUAdH1i
+ t9vqfQSuZbiWaCrAfqwxQlycOwpiCHum6xBTMB4s7ix1ADkkYjrEik9z+03+
+ I5zU+kJgksrmwA49BvTIiA/fuVgAT5n0Yx5to6GSh+4Ax3aWn7auaPd9rDz4
+ /2Me4Kr7vyST8LdqLnA1mgFXJJTPmXMNMVb6Yp4x4pDxvOh6bQvjjtdUoXDF
+ OvwekjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAnSm0NhdNR0zRRTAxa
+ CWvDgDDIHqd3Iz4xbCy1MYoSF51kW9MZmW7fhR4yS9nHeO9mcjduLxAjWFsZ
+ 59ogTZ0Pz0A=]
diff --git a/hieradata/nodes/mariadb.yaml b/hieradata/nodes/mariadb.yaml
index 7e6388b..a8890fa 100644
--- a/hieradata/nodes/mariadb.yaml
+++ b/hieradata/nodes/mariadb.yaml
@@ -4,13 +4,13 @@ classes:
profiles::base::admins:
- jandd
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAExeqn1absUzqN1sJOyHNtZXPcsU6vj8CZbAU
- BxRes3h2rmqSbPB5pTkz7n3bPhQ3YYJpFkW7gIZ2I7R2O8FxQMwR7n+QL72F
- ULV7FO13kAOKbGm/hkNoCfCW0AmaLO52v7lMPlMgbXqbX3i5wCj3auvz/O4R
- hyGA90K+k3kf1/6oQlVrRf9fSiufVYoiihDeJ110FhRFB4mBxOHFJopz3A/H
- 2POMF3BaLv38t+dYFtkCt7jNW2JCjv15VuplZIh3BYrPCzk0WyUIJ8OUpK4I
- Wr5+eHO5voJC3KSOC6XkLGDIdYxdlsagNDTVjITPv9qMTf8to2sGRP5SYybe
- RHGy0jBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC052YuUZgXpP5SSxLW
- i0VDgDAmv/QiQgdEsqIxzX0VsA4Qn/JSE1QI14hUme9FSJEBRzN8+l9v3nlM
- Sc10J34uuTQ=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAExeqn1absUzqN1sJOyHNtZXPcsU6vj8CZbAU
+ BxRes3h2rmqSbPB5pTkz7n3bPhQ3YYJpFkW7gIZ2I7R2O8FxQMwR7n+QL72F
+ ULV7FO13kAOKbGm/hkNoCfCW0AmaLO52v7lMPlMgbXqbX3i5wCj3auvz/O4R
+ hyGA90K+k3kf1/6oQlVrRf9fSiufVYoiihDeJ110FhRFB4mBxOHFJopz3A/H
+ 2POMF3BaLv38t+dYFtkCt7jNW2JCjv15VuplZIh3BYrPCzk0WyUIJ8OUpK4I
+ Wr5+eHO5voJC3KSOC6XkLGDIdYxdlsagNDTVjITPv9qMTf8to2sGRP5SYybe
+ RHGy0jBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC052YuUZgXpP5SSxLW
+ i0VDgDAmv/QiQgdEsqIxzX0VsA4Qn/JSE1QI14hUme9FSJEBRzN8+l9v3nlM
+ Sc10J34uuTQ=]
diff --git a/hieradata/nodes/monitor.yaml b/hieradata/nodes/monitor.yaml
index 05213aa..2a5515c 100644
--- a/hieradata/nodes/monitor.yaml
+++ b/hieradata/nodes/monitor.yaml
@@ -4,44 +4,59 @@ classes:
profiles::base::admins:
- jandd
- law
-profiles::base::crl_job_enable: true
-profiles::base::crl_job_services:
- - apache2
+profiles::base::crl_job:
+ enable: true
+ hostname: monitor.infra.cacert.org
+ services:
+ - apache2
+ check_url: https://monitor.infra.cacert.org:5665/v1/actions/process-check-result
+ api_user: passive-check-submit
+ api_password: >
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBAD
+ AFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAM31x48NC4B2agnpHt0hEzxLLJm
+ ADhYW0Lj3JuBNj+wpK8O4GkAf9L2OlOiNAIgiX5epzbUtvtB8ayQQ2+4yuNn
+ jkgfSDvPaGU+f0mFv0CjynUEDrf2rQzevFyIfnpzN9ZSnGw2/59tpS0LyJ6M
+ Yv3NmB0mdXzPWMrgCMt+G9i/l1s9yVjOw7p7V9prpUqD7hGKG0Fg7EeM7LFJ
+ 1ovxPDDar4ZlhooM6+W3Ov5n0y/3bYaPWv+VhcVmSQvWgJw6ZqP5jhpYTqSC
+ dr8urkIi1wfSSPeiNXhK+SQS/KFZOl9dmhj6QuereRyXX1H7X7fphVltADBq
+ S3mCbxlgEEPPgTbzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDlvyMRCV
+ MAziedXFk/L9XcgDDpzkgF8ybQ+aX31v25dTxzAPEnjuvaGY5njoUEbcpkOo
+ f0mf2So5a6xrylLZCcxrw=]
profiles::icinga2_master::git_pull_ssh_passphrase: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEADAUF/OAtThNdlPwEwrPKAVwl+wTJbirFEWxL
- rJzE1qe+NSncOqD+G6KNOBQRRXfv/sf81+AnTCahM1/kv5TPILrUgXoxW5c0
- IXC6OlDfaIab8kcC45wn2yj/igZnW1Xvix3n268pEfRnNDjUSFwrgbmaLtoV
- ovDLZvQOlWntN8VUuYaDr66XRSEy4AGcmCMUms+6RQqdupWfOCrHtnTtVyyN
- enQUKr0+ndlnzIkXiU4ghOjExFzGJ8BxGyKTMeQ72k2GZlDPUk72sixZ647k
- f7CbzXToutyFqieOdNtkAKDY2T3ij03Wd3JhNWTu1Jbe4G/AQgsxiTwETdqh
- /QgjjDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBKOeRdLS8fFyoc08hO
- BnsVgDBWDpuwBbC31j4g02xKE0tbvazTE8zhkH6iS5mIrL3R5heLvDwquYia
- pUh+MxqObAs=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEADAUF/OAtThNdlPwEwrPKAVwl+wTJbirFEWxL
+ rJzE1qe+NSncOqD+G6KNOBQRRXfv/sf81+AnTCahM1/kv5TPILrUgXoxW5c0
+ IXC6OlDfaIab8kcC45wn2yj/igZnW1Xvix3n268pEfRnNDjUSFwrgbmaLtoV
+ ovDLZvQOlWntN8VUuYaDr66XRSEy4AGcmCMUms+6RQqdupWfOCrHtnTtVyyN
+ enQUKr0+ndlnzIkXiU4ghOjExFzGJ8BxGyKTMeQ72k2GZlDPUk72sixZ647k
+ f7CbzXToutyFqieOdNtkAKDY2T3ij03Wd3JhNWTu1Jbe4G/AQgsxiTwETdqh
+ /QgjjDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBKOeRdLS8fFyoc08hO
+ BnsVgDBWDpuwBbC31j4g02xKE0tbvazTE8zhkH6iS5mIrL3R5heLvDwquYia
+ pUh+MxqObAs=]
profiles::icinga2_master::git_pull_tokens:
- ENC[PKCS7,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]
profiles::icinga2_master::web2_database_password: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAIgd5qF6rnFWYhyo38MRacrz2VcYdoni/m8Zd
- piYiYmGp2GaJZZEZC3svdYxRZz8vmXz1/V9PM8znf8E8z6ClbqF6urExUIf9
- Dl5+60UOyasp2iHngRG9fcKUBtPDqERlS04xD/CQup2XdDYEsaTrIIsnuOSc
- Zut3vB1KSIerscLjLNUvZGanEwf1VGwzFU2rStIRFwgR9pDX/+gr/6T5+Ydd
- rZrsvTClPKEKsJ7fQc/J+3fhphz8QlqYz0Yo2Yn/Ws9qvlr1O29cYTNJ5oj4
- xXB+VAeqCiTy0Bmud9W6FdHz61w5ylWjLRNT0qtW8bu/eFHCj6XTnBu4lorW
- ocPHkTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDV+5TW/J23xVA6MGZo
- zfzCgDBHbsaS9cJaGXgnZSKLOQwUlJmG7WgOL0FCgIEp8vYT8upZFuikokHH
- vGkNL7s7xDw=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAIgd5qF6rnFWYhyo38MRacrz2VcYdoni/m8Zd
+ piYiYmGp2GaJZZEZC3svdYxRZz8vmXz1/V9PM8znf8E8z6ClbqF6urExUIf9
+ Dl5+60UOyasp2iHngRG9fcKUBtPDqERlS04xD/CQup2XdDYEsaTrIIsnuOSc
+ Zut3vB1KSIerscLjLNUvZGanEwf1VGwzFU2rStIRFwgR9pDX/+gr/6T5+Ydd
+ rZrsvTClPKEKsJ7fQc/J+3fhphz8QlqYz0Yo2Yn/Ws9qvlr1O29cYTNJ5oj4
+ xXB+VAeqCiTy0Bmud9W6FdHz61w5ylWjLRNT0qtW8bu/eFHCj6XTnBu4lorW
+ ocPHkTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDV+5TW/J23xVA6MGZo
+ zfzCgDBHbsaS9cJaGXgnZSKLOQwUlJmG7WgOL0FCgIEp8vYT8upZFuikokHH
+ vGkNL7s7xDw=]
profiles::icinga2_master::ido_database_password: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAQVzlV3aXJTf54OReOA96VsrAPutFLx939Qf2
- pkjU4uzfh14wF6hCUBzJM3TsG8+EYFZmHQv7LqCbDQLfYVNs62sDlOBigWh4
- za1YWqewtuasrvqZdUKPD1tIyIGLh2+idv0/XJHpkv7nt/oVRoINZdzO+Afr
- dbx6Dx6aFWpX98HLQdsw/G1X8o+YZwwklASfSXCw/1pGLsPWWYSoYjyD4N9U
- eaOTiPQ2OLLnJtkAlyUMxTeq76iJw67vj0Vu8QqATZAoVU9rA/FnliMiYGrB
- GC/c/ACt9A5HZ6orBlztCqFj8/Z61pyFH2+09jCxODdgebyLt+gRuVP6RZvC
- XcFLlzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBB4LvLBDu+VZkAgtJ4b
- nmt5gDBW4KHCxlUcs8bRo71HIiDcSMBOTahi2hMlzwNC12NZlIR2spYytjH4
- 2/8qhSpCx+U=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAQVzlV3aXJTf54OReOA96VsrAPutFLx939Qf2
+ pkjU4uzfh14wF6hCUBzJM3TsG8+EYFZmHQv7LqCbDQLfYVNs62sDlOBigWh4
+ za1YWqewtuasrvqZdUKPD1tIyIGLh2+idv0/XJHpkv7nt/oVRoINZdzO+Afr
+ dbx6Dx6aFWpX98HLQdsw/G1X8o+YZwwklASfSXCw/1pGLsPWWYSoYjyD4N9U
+ eaOTiPQ2OLLnJtkAlyUMxTeq76iJw67vj0Vu8QqATZAoVU9rA/FnliMiYGrB
+ GC/c/ACt9A5HZ6orBlztCqFj8/Z61pyFH2+09jCxODdgebyLt+gRuVP6RZvC
+ XcFLlzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBB4LvLBDu+VZkAgtJ4b
+ nmt5gDBW4KHCxlUcs8bRo71HIiDcSMBOTahi2hMlzwNC12NZlIR2spYytjH4
+ 2/8qhSpCx+U=]
profiles::icinga2_master::api_users:
root:
target: /etc/icinga2/features-available/api.conf
@@ -60,251 +75,266 @@ profiles::icinga2_master::api_users:
client-pki-ticket:
target: /etc/icinga2/features-available/api.conf
password: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAjrore6zK7GJXbP9FZ6ORUWvpt7FS2fXHiwB+
- ocTcmP7F8SnyCjYZ/a6S7eXPJVffZ6pZazozfUmW6HXOVFcSrZZdccEcZbFt
- ZnQb9tp63BCHHGwqI/oj0jVdInaTXE1i4yQTjev/twzblmHIrEndfZnZzyAd
- 61cnYuv8og5p5pccGYYoXBcPcguB9KtspfYL/eEwD4xNvqF/QlkAEXKZ5o39
- p9j24ao57Iwzy4o/dgI+MOr9NIMEtmXoIb3Ake3J7CaN26IuP22MTivFWf5p
- 1vlMA69snYOifTKIw76eNACYCz+KA87dWDNEsR2OtCCbQ2EA1nrAXTdlYWdE
- RmIpGTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAAs0An2QOnxac51GTU
- gCG3gDAX0FOzW/oWi8c1PDIFb+0B4cTQRi9gP2fzugKu0bp0FBB7akZV6Zx0
- T5GP0WQAzU0=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBAD
+ AFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAjrore6zK7GJXbP9FZ6ORUWvpt7
+ FS2fXHiwB+ocTcmP7F8SnyCjYZ/a6S7eXPJVffZ6pZazozfUmW6HXOVFcSrZ
+ ZdccEcZbFtZnQb9tp63BCHHGwqI/oj0jVdInaTXE1i4yQTjev/twzblmHIrE
+ ndfZnZzyAd61cnYuv8og5p5pccGYYoXBcPcguB9KtspfYL/eEwD4xNvqF/Ql
+ kAEXKZ5o39p9j24ao57Iwzy4o/dgI+MOr9NIMEtmXoIb3Ake3J7CaN26IuP2
+ 2MTivFWf5p1vlMA69snYOifTKIw76eNACYCz+KA87dWDNEsR2OtCCbQ2EA1n
+ rAXTdlYWdERmIpGTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAAs0An2Q
+ Onxac51GTUgCG3gDAX0FOzW/oWi8c1PDIFb+0B4cTQRi9gP2fzugKu0bp0FB
+ B7akZV6Zx0T5GP0WQAzU0=]
permissions:
- "actions/generate-ticket"
+ passive-check-submit:
+ target: /etc/icinga2/features-available/api.conf
+ password: >
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBAD
+ AFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAM31x48NC4B2agnpHt0hEzxLLJm
+ ADhYW0Lj3JuBNj+wpK8O4GkAf9L2OlOiNAIgiX5epzbUtvtB8ayQQ2+4yuNn
+ jkgfSDvPaGU+f0mFv0CjynUEDrf2rQzevFyIfnpzN9ZSnGw2/59tpS0LyJ6M
+ Yv3NmB0mdXzPWMrgCMt+G9i/l1s9yVjOw7p7V9prpUqD7hGKG0Fg7EeM7LFJ
+ 1ovxPDDar4ZlhooM6+W3Ov5n0y/3bYaPWv+VhcVmSQvWgJw6ZqP5jhpYTqSC
+ dr8urkIi1wfSSPeiNXhK+SQS/KFZOl9dmhj6QuereRyXX1H7X7fphVltADBq
+ S3mCbxlgEEPPgTbzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDlvyMRCV
+ MAziedXFk/L9XcgDDpzkgF8ybQ+aX31v25dTxzAPEnjuvaGY5njoUEbcpkOo
+ f0mf2So5a6xrylLZCcxrw=]
+ permissions:
+ - "actions/process-check-result"
profiles::icinga2_master::pki_ticket_salt: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAq7zw5VVeKvukhSo2g3YK/7fIUC5JbyTrX2XI
- vAoB7RP2eoEXJRcZG71BNJRMXYlfRwZF31GKAx6zCnvSG8LPpl8Z7D8rNFi+
- Xw0ftUPE0A2WjMuX2ZPjwFRpQB5cuR0DRqvHoWzkyiePbhE62vRYxLamTT92
- 1f2FpBM42PIkyD+o9+Bu+1eUXFf4Bvg/srDq+clDQEUJEH9Zk0boUR0aYNzu
- 7O1PW/QSMCvIRXnmhRQr4MoeHQmgK52JxssdISEEBPpjL/oQyJ57XjgDh55c
- 8/gkj+L/p+E/TnE358x5FAm1PNSivH+uohXCxfMu87ukpBJh41tzfI7KBWxY
- wEtKajBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC71KjJDv29zuAaxnyH
- o3uJgDDydzmhZKEQxhkFNW9TNquxCTXdfPZ/zYPb/TqWq3amcnQwoqNltz+5
- QoSf/2LDk4o=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAq7zw5VVeKvukhSo2g3YK/7fIUC5JbyTrX2XI
+ vAoB7RP2eoEXJRcZG71BNJRMXYlfRwZF31GKAx6zCnvSG8LPpl8Z7D8rNFi+
+ Xw0ftUPE0A2WjMuX2ZPjwFRpQB5cuR0DRqvHoWzkyiePbhE62vRYxLamTT92
+ 1f2FpBM42PIkyD+o9+Bu+1eUXFf4Bvg/srDq+clDQEUJEH9Zk0boUR0aYNzu
+ 7O1PW/QSMCvIRXnmhRQr4MoeHQmgK52JxssdISEEBPpjL/oQyJ57XjgDh55c
+ 8/gkj+L/p+E/TnE358x5FAm1PNSivH+uohXCxfMu87ukpBJh41tzfI7KBWxY
+ wEtKajBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC71KjJDv29zuAaxnyH
+ o3uJgDDydzmhZKEQxhkFNW9TNquxCTXdfPZ/zYPb/TqWq3amcnQwoqNltz+5
+ QoSf/2LDk4o=]
profiles::icinga2_master::ca_certificate: |
- -----BEGIN CERTIFICATE-----
- MIIEyjCCArKgAwIBAgIVAMGxGJbZJq/vXMuXAnAC8QvFtvhMMA0GCSqGSIb3DQEB
- CwUAMBQxEjAQBgNVBAMMCUljaW5nYSBDQTAeFw0xOTA3MTkxODIwNDVaFw0zNDA3
- MTUxODIwNDVaMBQxEjAQBgNVBAMMCUljaW5nYSBDQTCCAiIwDQYJKoZIhvcNAQEB
- BQADggIPADCCAgoCggIBAMh+p0jach/6ICsP/o01nku28g0jFB/HSp5n/WZjzykW
- MvgvYc/1lEaiuIeB93AobGB3EACNw2/Xfh1deRGP8UsIOIjeeUibfk0i4SOmFBRb
- 0ZmwUeNVygY7rmhO+fwTPi6bb2+AA50RkDP7jTpwaQFxppziTXUqW8mj0LBSLtNL
- z8dC2YS/JLKSoNyHupQcL+pHVHO5S9QnFWTnhwIbnWSJTG13BOYw/RUz6WcxFDHl
- Xi/lprjcorBUDsH5YBfy+/2WJ0MZFqRnCPQKb5oilR1/k+9XpmFz8W98KCujjpNm
- BEantf7OaaYFIxxoWyrGC1RiMnkSQwa9Pcxgwflca5UC1fW0Jx2zsgDscdWp+Xeo
- lhYtyHa6upgny66SvekjM9mAm6vtlsBplxYZtz6BgqoxXqk0AwAwiU/9nyXGekAp
- FPMmENBLZvANuA6hdaMJQpOoyHBDOT8teoIJOut92ptk5bVE4gxwcWc1uFCP05nr
- gA8iTXnabihXbm2Wb8kk/+34wEru5jpwMh1NEH/TvaqPnly/dBHkmEhJquYyoZFS
- ttKl64XXdy9HGaTaA6b3dQPeZqHbmadRZzcsxjn+zP8Nu8OTZ4HXkAJ2e3nxlRKs
- 2EaZDJK4SoNBvvkYLScLLYH5X1uC2gs6AHiQDiczQYxMqai5pEnrLHO7B/pE+d/1
- AgMBAAGjEzARMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggIBAGYh
- pqAK55ei8+S+rXt1wQbejAphJ2GtTft8XjlfVbpk7s7wd/Wt0gLAs4dvPPI1U0k9
- N6E5WJrn31QbaXHFDwdxFw1ViLxDmepAp+Kp3pQE5bPNjo5e6iwgOGVB20R20ADo
- foUfk5u6WfGGSJznDkTTdoYdSsHm1d1nsZKt0i2QFnLEIEBOJW4gwY4LiW7ArfYS
- 21Ji9VLgKxF9We4Y0ppY+7rU8r/aNDrYv0Ghe+IA0+k8KoTGuhBXzxfwUUZ+1+yA
- JYSmxFzhPJCdwRX3IBn4uTVMRlugntgpmB7m5RyW18MUlAw52Ppe5EtOke1lxxh0
- G5KYt+pKPnkOVj2LRLvOcAOO47i42q+3P4m2elkPHTrI2JmnTwWNjpkNNc4LeFXs
- 3HE3SoSvXvImabhBfioqThVMAEEjrtkAQSOFg281vaIgUPbwqcVmbOHv/2Cow0xw
- gYrp+hB0hhf5rpYi1SMLTKIQUJT6CKnIgN9KHMwcz6Zq4WcshXQxZZrazXomJJ9k
- WKBpvys1Mfn0Y+phqmCXW7D9Yh1T32pnyOTm8kUonBhIoDEwYN5v175ySw8jjiUD
- Dlkc/kuv3szLVWx63FvOPc6ra9rmmdwmDaVTd9fGlo/NrquCQOGu59hiACPept+I
- y+bP1kZ0Z+5qrmlX0zrcLspzXOyY0VX/YZ3unzyp
- -----END CERTIFICATE-----
+ -----BEGIN CERTIFICATE-----
+ MIIEyjCCArKgAwIBAgIVAMGxGJbZJq/vXMuXAnAC8QvFtvhMMA0GCSqGSIb3DQEB
+ CwUAMBQxEjAQBgNVBAMMCUljaW5nYSBDQTAeFw0xOTA3MTkxODIwNDVaFw0zNDA3
+ MTUxODIwNDVaMBQxEjAQBgNVBAMMCUljaW5nYSBDQTCCAiIwDQYJKoZIhvcNAQEB
+ BQADggIPADCCAgoCggIBAMh+p0jach/6ICsP/o01nku28g0jFB/HSp5n/WZjzykW
+ MvgvYc/1lEaiuIeB93AobGB3EACNw2/Xfh1deRGP8UsIOIjeeUibfk0i4SOmFBRb
+ 0ZmwUeNVygY7rmhO+fwTPi6bb2+AA50RkDP7jTpwaQFxppziTXUqW8mj0LBSLtNL
+ z8dC2YS/JLKSoNyHupQcL+pHVHO5S9QnFWTnhwIbnWSJTG13BOYw/RUz6WcxFDHl
+ Xi/lprjcorBUDsH5YBfy+/2WJ0MZFqRnCPQKb5oilR1/k+9XpmFz8W98KCujjpNm
+ BEantf7OaaYFIxxoWyrGC1RiMnkSQwa9Pcxgwflca5UC1fW0Jx2zsgDscdWp+Xeo
+ lhYtyHa6upgny66SvekjM9mAm6vtlsBplxYZtz6BgqoxXqk0AwAwiU/9nyXGekAp
+ FPMmENBLZvANuA6hdaMJQpOoyHBDOT8teoIJOut92ptk5bVE4gxwcWc1uFCP05nr
+ gA8iTXnabihXbm2Wb8kk/+34wEru5jpwMh1NEH/TvaqPnly/dBHkmEhJquYyoZFS
+ ttKl64XXdy9HGaTaA6b3dQPeZqHbmadRZzcsxjn+zP8Nu8OTZ4HXkAJ2e3nxlRKs
+ 2EaZDJK4SoNBvvkYLScLLYH5X1uC2gs6AHiQDiczQYxMqai5pEnrLHO7B/pE+d/1
+ AgMBAAGjEzARMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggIBAGYh
+ pqAK55ei8+S+rXt1wQbejAphJ2GtTft8XjlfVbpk7s7wd/Wt0gLAs4dvPPI1U0k9
+ N6E5WJrn31QbaXHFDwdxFw1ViLxDmepAp+Kp3pQE5bPNjo5e6iwgOGVB20R20ADo
+ foUfk5u6WfGGSJznDkTTdoYdSsHm1d1nsZKt0i2QFnLEIEBOJW4gwY4LiW7ArfYS
+ 21Ji9VLgKxF9We4Y0ppY+7rU8r/aNDrYv0Ghe+IA0+k8KoTGuhBXzxfwUUZ+1+yA
+ JYSmxFzhPJCdwRX3IBn4uTVMRlugntgpmB7m5RyW18MUlAw52Ppe5EtOke1lxxh0
+ G5KYt+pKPnkOVj2LRLvOcAOO47i42q+3P4m2elkPHTrI2JmnTwWNjpkNNc4LeFXs
+ 3HE3SoSvXvImabhBfioqThVMAEEjrtkAQSOFg281vaIgUPbwqcVmbOHv/2Cow0xw
+ gYrp+hB0hhf5rpYi1SMLTKIQUJT6CKnIgN9KHMwcz6Zq4WcshXQxZZrazXomJJ9k
+ WKBpvys1Mfn0Y+phqmCXW7D9Yh1T32pnyOTm8kUonBhIoDEwYN5v175ySw8jjiUD
+ Dlkc/kuv3szLVWx63FvOPc6ra9rmmdwmDaVTd9fGlo/NrquCQOGu59hiACPept+I
+ y+bP1kZ0Z+5qrmlX0zrcLspzXOyY0VX/YZ3unzyp
+ -----END CERTIFICATE-----
profiles::icinga2_master::ca_key: >
- ENC[PKCS7,MIIOHQYJKoZIhvcNAQcDoIIODjCCDgoCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAndhxooQI/m9cfD6jfWVHSce7ePzRwpt8F4qy
- j4SrGT4OWsGYVSDoql2l/w0SGKaw68zBCYJhaI48EvztPsJIO1VwCGjhYbpj
- R6gAemOpmYAXMoD+2uei+ZSHwyyNZraXHUwYnJVLKSzAGAkhr7XWv/L4+s9+
- kEOCnEmJ84I40hPKnwuY4VTaMmq3UzI4KvS0pFx5j7c3GnX5XRcP+LcuyrxB
- eE2tC6G+naiGjXL9M/V+vUPT21sfaRuCXRZHnkzP6gOiGiCCTevAyjbPH2fc
- rBXGGg/et2IFZIEIdEMIH0DUIO10D8S1l526ODWxCWwnD8CmfnDxYajHdW3s
- DO0PEjCCDN4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEENJfLNIsVAoEd0lc
- lXN6TiOAggywLP849H4ful3AaaT/IxQF0L5R9ohoTsyVjIOkSX1c7MXTK7tg
- uILL/LlqZWSsY9uE2glTFPXZR83DgArMF335+wNBDwhLVAUdf0b+BE8m7Lpg
- DGMomJNgqFtDjNqvX6i3O6RH0Iz/zjwKDTHuWtBq739VE1d3x3IU7gNq64MN
- oYA83C81YLys73la+ETrruAYUR+qxUNn+DdU0r894wHtSWrRQ4nIN5algsBI
- mJx/k5pmii2k5bWhPAM6FMsJfaUKHRTz5r1ngHry+LcOFzotGmDhFsndqaKv
- FBnP9tC7v3JlMzcMVN5hI4oZXkURsiZMuFK19UClf6+50qh0VIp6u5xG4tcb
- t8zumv1wWySZnRNFgF4eXcvDY8w4G0nyaYreN5JcP/vE6OFXGqu2hqi0/Dl3
- 9Y9775N8YphqZBWZdCPFVEA0eh3aC1zhLeM9wo00koDTjaALs9Vp7CSsA4j3
- G/Y3Mq2muQmiz9vxcgLc+x6ooD2BKIgveZmLr49zEd4kmHThkhZbj4l8ZCBl
- 7GVRuLleV/D/zXEpejPuFd/rd0dHV0qkKdbjEHi4gjr5ZXcU/ZyAs+kyTk1O
- 3OUxMVId487I5F/oUh4MkwqNJp1Fc8mKed/AYmB0bEG7aCvJGcK+G4LynTAZ
- R2/XqVDq3wp3hfaEgwaVANpf+7z4Du+K5uqGlwkrzUov6wSgfNV84ddus/on
- tLSqeeW8NFVnVaUw3mnfs+H/c+MLZvxYhLEELjfzHYsZEr/KwPgULoak60LZ
- bjtsWI1ruI+YJu9F2f+PckOZyfwLEb19vLTJnyBYYZ6gCqWxGsgjDVL6G4V9
- /WcfrjrU0TopfPoPMtPlKRkltxef4xoSchcONQBwKNn6CJKkZSJHZ5WlciiM
- BSdcKJj+fA8h/EXvZ3DVP1ka9PSEN3WU7REon9IWi74iLZOlzDRs0bCW4nhD
- pphj67QfW0fpCbphw4RkYSp7WCe+s+GpRIKyg6KbM4wEVawqoTjWsvDSflcJ
- CX7joJhvjdepWWwWX1yfX5lwFi1vqexGME0XtYVWrKItSKfVAbqRmDNx6GjJ
- fImihwy7fhVsOtvDgo+nIGn779TfMvy6yQAWQ3cbGGg89mCHVumVEfn9nj3k
- 14IMF97GHNTNSUIzCUw88DxjWVDyuqJNtpwNCFdorRpH1d3p3pEHM5GGvIFI
- hkVdDmFgKPUpavEX+MBVP+INGvfQA8NFsTd14vaS3we48dH+BxMsp9omZlnJ
- fZWcBlcsTlAf1mLjMqgkOy46b2+61MXVp/EkU1t+JOiHiVmT+SEloof4W+ti
- xRxFOA9r2+k5iwprEJokojethAR/rZhMeq/U3mPeU4veo0uvdMNzSOeEejXV
- ALcLridts1/tT+ggj7EPUThmxjO/iI5SF/HjFBOAy0vmBjfTCX6y52W3RpBf
- Jk6e261a8fwaD8jEYJy/x7nbvBj1+yUhvHzvPsowQ1lIN6DLugg8aCyNprlB
- r9/P4rj6t/cmFJrorMi9yoyk5oekQlg/OkQBu+vyvVjIvVmHhmZ5yGl26TUt
- wJja48XhSE+S7arDKbZqDZro+/lALluOtdwpW8twwlaYmEBG0IPgm5PWtq6T
- sRMpLGfUnhJrjGST0l9jOswgdngvW4gbcmKuN1HCEi/soj2QIcMEwRHRr4er
- gECzO/TbL+OIt4I24TfQJhstfOd/s5rgGyuuhtd8Z83QCeUoZl3QmyYWzaNK
- 6QKwdLZQAgrOPKnCE9Vp7lC0/NyjYWlFt0Cm48kJtAdv1pbV8I/W6QkoQHmU
- Tx9XBuJPFspXmpZDrVNQvCBvM3Q/zTLDo4bh4EP6BP0US3GwPCH7dIqaqiIT
- wi++3XeHtXhpJC5+D66Qy8WfAxhvCPIpufI8rjVl+DyzOikT7Uy5GCg7uhM7
- 3W/n8HBk2kOMq4EJOp5iq0Aa1zspi32oPTP/4VM3zq2J8TxgaWAWt6vY3K7Z
- DeJesj8YWHLisCyjwjeShrCr7D6nmkmXCzl+m4/NF9Wqgk9RSPIE3RFYAa5A
- 90dCj/mihDT01Dzt6D2TRBrGiXv8GX+Axt1OJDbJLESorqjkKq7+5qIiKA3+
- QSyWL2k/TNdTuXbk4s0ZC6/Zkagxysn2K5skngiKYIil7LuJVs+aQ9ZeEqXP
- G8/kGX3m/Icg1XeKYjdkbnhTS71Jr40rrqXGzD7JmIxF9NvVyKweUOfDomPV
- 7+/Ig3orrNn85oWpz1I0dNDuF3RPa0JLrSoSymRs7iygP13AlQJ4pXSqQ5JA
- X66BD7GASdcMVcJkI5DH1vcLHWgqJLTOoSDl4SQLzcbksdFGDXcbtzppHLeV
- wwfMiuiK3McgXJyAHMiRPMyGuzc1NViDROG8ysa1RaygVMeosNp/BZigCAPK
- DGODa4C8LoQp5ynSPaLkPdCi+7lk/0UrIDgBaXnYHO1L1LA0ecwQsb02K789
- SmsZLX5iFgSPoREJXn/VQpJH+Td0bl2uZa6Rf0W7pmz34HnapiSln28VaTpe
- OA04FC1JbQiV6DoU22iBz+gBlz4C1YtoZ0QrPrrpSr3SlVr6wZj7IrgBaKL+
- I7Bu1gA42UpgQ2Loy86rNtZOHNhruYRfW6k1TZxIHNFLFfs30XfMIfoGp8tg
- +o3cxrN9vvRuLEUthPsosU6F5c7Y+1FOc9kJLzw6JVOOxpqAgHl2es8gJh5B
- ni5q906VAy+UGsc6KF2cj5m0ZaszZxF/TC+mVmJqE1jv74eqdOqNeGE7O+US
- IdCtJrtn4Uew6AXjo5bQsIBGM/I1OAF67ossbsjIJHmT1kKy1Rec7JlkZs7B
- EXVS5h3nROi/3ImCnqdf+HaZw3xsWaHs17JekLbE+7mSuidU1XCvVFxChN1s
- HILG6xuf2oh3f1KsxqgR0OOyiNf5XikgkAn71lCT0DSd1K69uEzCyfsgfRMf
- pmtmLeB/Xn+SQAlCxxgeeDwcc/tao2G015weu3t9fs1LRsFCiF0Q66yVr8kp
- dJ/lfTNkr6oFz0e20D0ZsjOOGIJDZHlA6fz9hiIz4VHMUrt+JHdPMiIwIGaA
- tXGkHU+od8fp7QsQJ+Es1L4wEHO7D18RzZzqoJUShkdDOELTy+kb3cI++o26
- 0pD7FwsN9LtqHi7fh8dzetBOKWpVEkOVoEjYX3RBPZHimUJfTC9prG+SsyI9
- KrJNmBrd4/sWadfHGInht2xaAfcdpOqF7BsXGWeM8zuythAyy5dyg9w31oLL
- hszXRQD/aIxrmXhT0Fp3j53gIHqH9o/kBvMd81OqfnWsgqwMxgH4x7l5+zbA
- LpWBuJNP9rNQYKnWtgmLXAefYPDb0MddluyhuhQrkOZMGN8sJXj/0ZOhb/Hy
- gM1RBr9Qx2YI7YsBZgZ+27nwOH6AXZtzCktMin9C/fxh+e4/YdUMtA3ciOmR
- WH1itD+tA3enNBpLuiL7qs0a51AXBWtjj8nQD+CK4dRMTvP+tUuV06ghgmgs
- VyvfeSd2DU2szu6BR5WTfg0jUxy09zWnK2Hc3eazGrJR3rg/BL8EKv9DTOXT
- US/LJrmzdFH3T7qdtHm9gX1OPYxNIPUOL6i3HxRIQ/iPpAqQpWCZtIzgOXzh
- 9AsKT4INrUBVdYGl+ox6WaPzJ/2ZyWduOTP3PxopBXD5khn+y6Kl96W0CaR1
- A7VEMLHnrx++cYJn3S1Y0S4QLyvgZe27HIoA47Xx6RT2lxb++wxefIs3U+hJ
- 98eBY8MMUWng3t4RoCYMQpMgh0q4VuKkQDJsdE2yW7elRWG3tfAW5AR6P2pu
- jg4pclb3nFEDNWaKTtgYjtLljy6zBKqC2FUASNMeqs+YQC/ZR5v+monKt1Mf
- H5ZIJFAojQ+J9ce6GVC82+wqolVKCnzI0pJAJ5iXhiiNLxZBfO5NdYCEMg6U
- plW4nyl/0UrYI6p8VuMMFMZStf6QMPY+Gyz2/3jDdWH7CEaSrrHba1iz69jg
- F24Ts8m7BQefJhKsBwxbhCJisijfp0Q2Wrwi9p3upzalYQqG6Il/cr0b6NMv
- ZFoFMO0YlM6sEpGrs/mMEgoiSlPXVMciRpV4PWLiZMqRTmnsxnHPKCeMEkwq
- DPOcDtcL1RUiFiohwx345kNwKqeu5VO43A2v6ppFdTaE3N1v2ws8X+/3JEXn
- d1i7bkBQjer0NQEOnVCxrO+uOOOVvmtUkVk8QJi9oCBQMUJJ3gm9HZXwvEYV
- QHfjLm7Vy2L/2vsAqJHmaYwLJbnCO4KbCGzoLFBBE2gz17wYIPIgDbVxjNRu
- W1HABIXMJ8IEQJnN9mDYZWjUsutf8FRFsfAPMoAGX5M5tLVrTUQbXUjtpJ6v
- RA3cuu7epXa+RGV/NdgBV1k=]
+ ENC[PKCS7,MIIOHQYJKoZIhvcNAQcDoIIODjCCDgoCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAndhxooQI/m9cfD6jfWVHSce7ePzRwpt8F4qy
+ j4SrGT4OWsGYVSDoql2l/w0SGKaw68zBCYJhaI48EvztPsJIO1VwCGjhYbpj
+ R6gAemOpmYAXMoD+2uei+ZSHwyyNZraXHUwYnJVLKSzAGAkhr7XWv/L4+s9+
+ kEOCnEmJ84I40hPKnwuY4VTaMmq3UzI4KvS0pFx5j7c3GnX5XRcP+LcuyrxB
+ eE2tC6G+naiGjXL9M/V+vUPT21sfaRuCXRZHnkzP6gOiGiCCTevAyjbPH2fc
+ rBXGGg/et2IFZIEIdEMIH0DUIO10D8S1l526ODWxCWwnD8CmfnDxYajHdW3s
+ DO0PEjCCDN4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEENJfLNIsVAoEd0lc
+ lXN6TiOAggywLP849H4ful3AaaT/IxQF0L5R9ohoTsyVjIOkSX1c7MXTK7tg
+ uILL/LlqZWSsY9uE2glTFPXZR83DgArMF335+wNBDwhLVAUdf0b+BE8m7Lpg
+ DGMomJNgqFtDjNqvX6i3O6RH0Iz/zjwKDTHuWtBq739VE1d3x3IU7gNq64MN
+ oYA83C81YLys73la+ETrruAYUR+qxUNn+DdU0r894wHtSWrRQ4nIN5algsBI
+ mJx/k5pmii2k5bWhPAM6FMsJfaUKHRTz5r1ngHry+LcOFzotGmDhFsndqaKv
+ FBnP9tC7v3JlMzcMVN5hI4oZXkURsiZMuFK19UClf6+50qh0VIp6u5xG4tcb
+ t8zumv1wWySZnRNFgF4eXcvDY8w4G0nyaYreN5JcP/vE6OFXGqu2hqi0/Dl3
+ 9Y9775N8YphqZBWZdCPFVEA0eh3aC1zhLeM9wo00koDTjaALs9Vp7CSsA4j3
+ G/Y3Mq2muQmiz9vxcgLc+x6ooD2BKIgveZmLr49zEd4kmHThkhZbj4l8ZCBl
+ 7GVRuLleV/D/zXEpejPuFd/rd0dHV0qkKdbjEHi4gjr5ZXcU/ZyAs+kyTk1O
+ 3OUxMVId487I5F/oUh4MkwqNJp1Fc8mKed/AYmB0bEG7aCvJGcK+G4LynTAZ
+ R2/XqVDq3wp3hfaEgwaVANpf+7z4Du+K5uqGlwkrzUov6wSgfNV84ddus/on
+ tLSqeeW8NFVnVaUw3mnfs+H/c+MLZvxYhLEELjfzHYsZEr/KwPgULoak60LZ
+ bjtsWI1ruI+YJu9F2f+PckOZyfwLEb19vLTJnyBYYZ6gCqWxGsgjDVL6G4V9
+ /WcfrjrU0TopfPoPMtPlKRkltxef4xoSchcONQBwKNn6CJKkZSJHZ5WlciiM
+ BSdcKJj+fA8h/EXvZ3DVP1ka9PSEN3WU7REon9IWi74iLZOlzDRs0bCW4nhD
+ pphj67QfW0fpCbphw4RkYSp7WCe+s+GpRIKyg6KbM4wEVawqoTjWsvDSflcJ
+ CX7joJhvjdepWWwWX1yfX5lwFi1vqexGME0XtYVWrKItSKfVAbqRmDNx6GjJ
+ fImihwy7fhVsOtvDgo+nIGn779TfMvy6yQAWQ3cbGGg89mCHVumVEfn9nj3k
+ 14IMF97GHNTNSUIzCUw88DxjWVDyuqJNtpwNCFdorRpH1d3p3pEHM5GGvIFI
+ hkVdDmFgKPUpavEX+MBVP+INGvfQA8NFsTd14vaS3we48dH+BxMsp9omZlnJ
+ fZWcBlcsTlAf1mLjMqgkOy46b2+61MXVp/EkU1t+JOiHiVmT+SEloof4W+ti
+ xRxFOA9r2+k5iwprEJokojethAR/rZhMeq/U3mPeU4veo0uvdMNzSOeEejXV
+ ALcLridts1/tT+ggj7EPUThmxjO/iI5SF/HjFBOAy0vmBjfTCX6y52W3RpBf
+ Jk6e261a8fwaD8jEYJy/x7nbvBj1+yUhvHzvPsowQ1lIN6DLugg8aCyNprlB
+ r9/P4rj6t/cmFJrorMi9yoyk5oekQlg/OkQBu+vyvVjIvVmHhmZ5yGl26TUt
+ wJja48XhSE+S7arDKbZqDZro+/lALluOtdwpW8twwlaYmEBG0IPgm5PWtq6T
+ sRMpLGfUnhJrjGST0l9jOswgdngvW4gbcmKuN1HCEi/soj2QIcMEwRHRr4er
+ gECzO/TbL+OIt4I24TfQJhstfOd/s5rgGyuuhtd8Z83QCeUoZl3QmyYWzaNK
+ 6QKwdLZQAgrOPKnCE9Vp7lC0/NyjYWlFt0Cm48kJtAdv1pbV8I/W6QkoQHmU
+ Tx9XBuJPFspXmpZDrVNQvCBvM3Q/zTLDo4bh4EP6BP0US3GwPCH7dIqaqiIT
+ wi++3XeHtXhpJC5+D66Qy8WfAxhvCPIpufI8rjVl+DyzOikT7Uy5GCg7uhM7
+ 3W/n8HBk2kOMq4EJOp5iq0Aa1zspi32oPTP/4VM3zq2J8TxgaWAWt6vY3K7Z
+ DeJesj8YWHLisCyjwjeShrCr7D6nmkmXCzl+m4/NF9Wqgk9RSPIE3RFYAa5A
+ 90dCj/mihDT01Dzt6D2TRBrGiXv8GX+Axt1OJDbJLESorqjkKq7+5qIiKA3+
+ QSyWL2k/TNdTuXbk4s0ZC6/Zkagxysn2K5skngiKYIil7LuJVs+aQ9ZeEqXP
+ G8/kGX3m/Icg1XeKYjdkbnhTS71Jr40rrqXGzD7JmIxF9NvVyKweUOfDomPV
+ 7+/Ig3orrNn85oWpz1I0dNDuF3RPa0JLrSoSymRs7iygP13AlQJ4pXSqQ5JA
+ X66BD7GASdcMVcJkI5DH1vcLHWgqJLTOoSDl4SQLzcbksdFGDXcbtzppHLeV
+ wwfMiuiK3McgXJyAHMiRPMyGuzc1NViDROG8ysa1RaygVMeosNp/BZigCAPK
+ DGODa4C8LoQp5ynSPaLkPdCi+7lk/0UrIDgBaXnYHO1L1LA0ecwQsb02K789
+ SmsZLX5iFgSPoREJXn/VQpJH+Td0bl2uZa6Rf0W7pmz34HnapiSln28VaTpe
+ OA04FC1JbQiV6DoU22iBz+gBlz4C1YtoZ0QrPrrpSr3SlVr6wZj7IrgBaKL+
+ I7Bu1gA42UpgQ2Loy86rNtZOHNhruYRfW6k1TZxIHNFLFfs30XfMIfoGp8tg
+ +o3cxrN9vvRuLEUthPsosU6F5c7Y+1FOc9kJLzw6JVOOxpqAgHl2es8gJh5B
+ ni5q906VAy+UGsc6KF2cj5m0ZaszZxF/TC+mVmJqE1jv74eqdOqNeGE7O+US
+ IdCtJrtn4Uew6AXjo5bQsIBGM/I1OAF67ossbsjIJHmT1kKy1Rec7JlkZs7B
+ EXVS5h3nROi/3ImCnqdf+HaZw3xsWaHs17JekLbE+7mSuidU1XCvVFxChN1s
+ HILG6xuf2oh3f1KsxqgR0OOyiNf5XikgkAn71lCT0DSd1K69uEzCyfsgfRMf
+ pmtmLeB/Xn+SQAlCxxgeeDwcc/tao2G015weu3t9fs1LRsFCiF0Q66yVr8kp
+ dJ/lfTNkr6oFz0e20D0ZsjOOGIJDZHlA6fz9hiIz4VHMUrt+JHdPMiIwIGaA
+ tXGkHU+od8fp7QsQJ+Es1L4wEHO7D18RzZzqoJUShkdDOELTy+kb3cI++o26
+ 0pD7FwsN9LtqHi7fh8dzetBOKWpVEkOVoEjYX3RBPZHimUJfTC9prG+SsyI9
+ KrJNmBrd4/sWadfHGInht2xaAfcdpOqF7BsXGWeM8zuythAyy5dyg9w31oLL
+ hszXRQD/aIxrmXhT0Fp3j53gIHqH9o/kBvMd81OqfnWsgqwMxgH4x7l5+zbA
+ LpWBuJNP9rNQYKnWtgmLXAefYPDb0MddluyhuhQrkOZMGN8sJXj/0ZOhb/Hy
+ gM1RBr9Qx2YI7YsBZgZ+27nwOH6AXZtzCktMin9C/fxh+e4/YdUMtA3ciOmR
+ WH1itD+tA3enNBpLuiL7qs0a51AXBWtjj8nQD+CK4dRMTvP+tUuV06ghgmgs
+ VyvfeSd2DU2szu6BR5WTfg0jUxy09zWnK2Hc3eazGrJR3rg/BL8EKv9DTOXT
+ US/LJrmzdFH3T7qdtHm9gX1OPYxNIPUOL6i3HxRIQ/iPpAqQpWCZtIzgOXzh
+ 9AsKT4INrUBVdYGl+ox6WaPzJ/2ZyWduOTP3PxopBXD5khn+y6Kl96W0CaR1
+ A7VEMLHnrx++cYJn3S1Y0S4QLyvgZe27HIoA47Xx6RT2lxb++wxefIs3U+hJ
+ 98eBY8MMUWng3t4RoCYMQpMgh0q4VuKkQDJsdE2yW7elRWG3tfAW5AR6P2pu
+ jg4pclb3nFEDNWaKTtgYjtLljy6zBKqC2FUASNMeqs+YQC/ZR5v+monKt1Mf
+ H5ZIJFAojQ+J9ce6GVC82+wqolVKCnzI0pJAJ5iXhiiNLxZBfO5NdYCEMg6U
+ plW4nyl/0UrYI6p8VuMMFMZStf6QMPY+Gyz2/3jDdWH7CEaSrrHba1iz69jg
+ F24Ts8m7BQefJhKsBwxbhCJisijfp0Q2Wrwi9p3upzalYQqG6Il/cr0b6NMv
+ ZFoFMO0YlM6sEpGrs/mMEgoiSlPXVMciRpV4PWLiZMqRTmnsxnHPKCeMEkwq
+ DPOcDtcL1RUiFiohwx345kNwKqeu5VO43A2v6ppFdTaE3N1v2ws8X+/3JEXn
+ d1i7bkBQjer0NQEOnVCxrO+uOOOVvmtUkVk8QJi9oCBQMUJJ3gm9HZXwvEYV
+ QHfjLm7Vy2L/2vsAqJHmaYwLJbnCO4KbCGzoLFBBE2gz17wYIPIgDbVxjNRu
+ W1HABIXMJ8IEQJnN9mDYZWjUsutf8FRFsfAPMoAGX5M5tLVrTUQbXUjtpJ6v
+ RA3cuu7epXa+RGV/NdgBV1k=]
profiles::icinga2_master::master_key: >
- ENC[PKCS7,MIIOTQYJKoZIhvcNAQcDoIIOPjCCDjoCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAutSMdSCHNMnSQAidQt5A5eXTNNvVU1BsJxTb
- lXX37CV5XjtRao7+B/hl8/QXXOf5neNCh/Q5yRcr47cyJnb4zFcJrIluWHeF
- OSN4fDPogxIBixupVwWuEmxfDGUd+3QRmL8gEBXHVntzQPRW2AR7bgTldFy4
- d6XpVnFSGLkH2C/RdWeCnKsgumbBITo0mJnNvHB7H7tPHxMMvsIbJvmqu9lC
- OxJPZXIXnY6TlLuuIPiHpzrGsToB4dKrUYlQ9Y9KHHFN2NCRfMUNZkAd7vLR
- ZLzTFq7XK3CaDqmAMWisbI2kBHf7GAkZJky+vxeRRsJ2B2JREw/JmqF5tD+Y
- aVZz9DCCDQ4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEECubd68R7PosC6nC
- SnB2SqCAggzg3aZRHoxfBmvg91xRcWB2UKb2azHGHfHjatP7dcL5EQ3l8JGd
- fwzaUkb92HEtLBV9VqlNEnuZS3MKRxZGJFTtZ/P/Sg+gla5BEHgSX6YnGW41
- s1JulZDqkrSecpnBQ3j+w9apExWv4dHFJJ4jlR+S1GaPh4RaKZisozc0Ln7+
- zTZKKRWl/NCDPIw4+gpPpAWVH2xGpmUAv/kW1BGw1WQJDvr5sZ0+TgYybQbu
- 24PI7u59wvyHiQx/qNmlk11AAw2ysvTG9hbwc0JrfbinV6eE6ibB/tloQNAl
- /eGeNxxwOIKRFMQanWzsCUctdbUJxDoIyMBnFEf8muiLW/t4IND7+D/jK+wb
- UnwKsZJv9uwzgGAAy2RANTDoOjPnxAN1Ikx9TapGd/TnyN1LvwGKw2YbqgBX
- dyUqanIrHgr4SVvCr71Acw8qbUvt6NPMIgEAmF7+JD2J220WxpUu3yqYD9aS
- i0XCmTW03ObUQVqJaW/weO7PzaPcN7hhHt/XnJC/ezXCpQl8+yc3cKyjUJY1
- NI2RHztyp6Oill4FvBAkc1XAyVQGy8bpkAYh63ozQPuv9GlaCeL51/PYa6K9
- AGHXPh7Zf96hpeY0qNyW3W6vu8gvL3ApGUxkI+dimC/wfwQuR5969aCYxNtu
- siRVEUHXpIEZcGqP6dFDHieu3XC3/Dq9EPUvQ2gMO8M/SKAa4t0Ga5u2nvhD
- xKO/UdbnP1SD9sBiL6Tlqp+iw3K+7opCho+2mJ5Z6+finL5I4ih9pNW/BONM
- TN0J9ySDA7fFBMCM0mMlgkvd6/xts63tq8TxNn3SpJxL7RZTp2DDu8aH+gto
- e1nDtg+f4LJwBbCpLNbN6G0Blq5IMoo0jTDuddJTig6/xaY1AcrKIWI8ZqHR
- FAaFRJw0mhpn3R6psrEU464tvKQD5jQtlwUkYSV7M2CX9cGtgO0mw2YtNM/X
- xTrOyymSxO64zQDce2N0m6p4/jPUPna2NLcLhxRvA4x9Esn8TEsyAUOOPv2L
- 5fKQhOAfJmy7WxAR44phUexnsZIL6YculN+wJdkmBjYVrNm9b5XndXecbr09
- knseandJDRPShJkVILCQ/HqlDGMy3Bg4IGup3jGW495o5NHF69ExmGHFu7zi
- NAL2DwEqgJnfOllkwT6WTgGsJp8mXhg/2kY5zAJTb69dWGMGKKR1pHrJSyql
- f3F6gPkop6Om0I795+u0eQPPQJu3/48n+1wvHuHG6gGLQI/2vqTv5f1cSz96
- qCQ/5T/LQzrLwpsIlsrS6TBlboPEUHgw9v62naSVWwwqVZm4BRJQi+O1gqtw
- Fwp+mNSn8RIZD7SVdlpGD0141FSYDXS3KuS3Qm9NCBSxVBrXgW/xKy02vDKb
- 4eAmkxDB80VeTOLoq08bO+8gA6kksXEO6JR6ZEhH9d6DbyvwfgYws82sTi9V
- 4t31pAFyFr2lERrP8dNchwiNbMrSYyY77+ko6MG0V/oAxPlPQyzNzM139JRz
- H2vzIW/wq8+tNRDdvF7M0iK8EdPUj/Q6Q+BBKREp98ArjmjFLEWx8nRLjy48
- O9BzJ9ZGZlKKxPwx3uFptPHMn//syZmVdEfqHdsXO1AWRbqOqj5dB65Dq/m4
- +Bo/kXJAL/thltK7uO/F/yKrh686Dl2l49uQbTpksi7Sa/b+CHmWFmkzKvQH
- eJ2SOdjjRjST83dlc8QMjkF2WqYf450j6rd2KzK32ZoeQbd9z7yM9/6imbs5
- n7Cz6J7UE37EFdCO5YdAmnHEYrkJsF9MhSMYLfHa1t5UxeoYuTWdQLJ0k/G+
- g/bI1UraseYYZjh6ldxU0skCW/aS58nFurFFlqBYdnKaUyH1IQ0EWCG1XMzn
- qpI1rjtVy5LKi5aTFYYerXXmzYgNJo36YqP+7yYr+W4MQhT1px79dFLPTd/G
- dlu1SlDMjkT5e/XS08nGxgIMXgbZP1bRlX8mx0sqkjlfEiQ1bLGavDyrz+aV
- p5SpdGXpTREg+svWtrdCPMSne7AdSUhjlKFOwSDz4TWWojKv81LWys9OmeDI
- dE8urQTOxcTgp1CL7PElWb5Yizl70PvBqBKQW6iXtZzRvislnYmhctcUu2T+
- bwjEt4YIp1SwuklXdm4sskGpRSmGxYmqWEg7gasSVoQLdlLIUYG5EcyinTOe
- wTuaZUnUjiCznLVn0Y2Ti8PF7dH4Dfm4SO8ZAyR8F68CLDsgefoaMfPo3mYg
- Y4R5OywpS1ma90tpliF9IPh7YS66sUJS5GS7KFbeHRRxyLGUQM/fO/SgD48T
- nIEKFDeqbVOHmyvUVQCTc6+1QLnWrh6ywc7WO3Li/MCEheuL7WVd+ANfrjUe
- E1s+GIGg4TFc9CDCkDck/oc94gL7VtOJqgVpIy1XhtF1akaIbSoEJoP4oR0E
- l4YpEEDX+v4CwGAeVfnHsnPCXgF73OTbxsg6604YChK7SXxdKMuBR0ThmEFM
- Ir3aC56wR3Lbbjo4IVAUH9HvhImuJZ9h4mkl5DwCsAa+z7Zf8DYlDiz8ssrz
- LvByHO018A+Ox/7pKekMVIiF8nboNNsDDgqblGkKkLRWOwHB3J/w5zeB/m5P
- +iPSsB7Jp9g4QTUdG+PBoDQ7MI/i2vz7qnttP8KT4mDqd0ivznr9jWnrVL+v
- SrDvH80hoa7sIcHaWjeMXUWTh0b0D/cMi5wSE5fG0kiZU5/cSiA+pVzgBO0A
- 3+QXg+AYO60f233fkuvpJtdc6m4/E9pnKsXSsyGFPzn6/fUYDktzyYycOmnc
- G/8fwwWT8iiUujpOb1vt/uR7GN4Ctph5F1pcR+YaqAi8URQPM0qrHL5EsmJH
- HGhXzdc/M4HisYF0/TIhYDQqim0Uw7z0P1YRhW0TZiLtdwBYowQYfa9VJExX
- HMGm7ljcb2WIrxdWqzAjo2mrae0spGwBsMimfJOQo7t1DPtceBYrQdzONcM5
- EiJcRjb0+vDMCUqfT9G0hJh/5T1YexZg2uCtQTX2spglQYGA/XCVxhQwhY8j
- PKGEwgo8tL13dfuxsRzyZH/VdKfcw4O1tXXIIrrIcrRZ3XIWXXlnd+dDHPwr
- cnqlas2ZEXhgl2JufICUBtt0fUSjwrvaMXpHCo1SZLaAAOXrpZQ5q/dC4Mv1
- KWAyllfGdFMY9152DUlpwieZuFSyN8KFOib3e+ADyfaFBdybrItvbGyftgRU
- xS817bHHlCkOZ+Wm35/GZsTZgPtp2q4MvJXVLNtZp7NL1V7Ya62ww154ZOY/
- RbyKLdzUrb4SezX4Ie9KEZH78dTzTKxKZgtjkW1x466HMv8FSMsSDL87hV9Q
- B8T+zVTRMCs+fYXqi8BXdUBMT6j/CRw57U8Dwg+ECwBlyIFsdwkKCYoUGn5u
- m5575yug7bsA1+qJbEMAH8JbhFWWu6p0Tqdfy+++4y6dGJ6EAfdnXnNdvO5l
- yWl575+iUMgkFQONbcfwkrESuCaZA/kLkVIXkB89LTjPUrfQldYSc+g0Ycdu
- xf0m9IDT5lcF3JFgEjr+cYQx5AR3VmFeHE2rQlZgxaBtAaQ7heGRUCYCcGFq
- 2CAMf0+A9Ps7i8TWA5HtxQHRA+8pLX7XYV+RYSfkravU2CUueTVFyKBrxjL1
- MkVh1TyVgkdxYsGtZfwYmxnSqgbnJM9q6g/IgCwLkFWnSx4ie6b7ViWiC7yI
- 0AFK/xnqAAAKe0Ea35xJIoH7oCq8GClCMlf4Le8xm9/7CI1C1DMQT70pdORw
- U1bAKkFNxm6gSG0qcjFemeiUvUgHJKW0qOYsSLSUF2ff53GpDkzjfoFOITol
- PSIeSUVKF2kFR0rM8ua3wYypD1TDPxXSILfdAGOrvo6FUunB+QrScjbC5ra7
- mpTZcofdgIo5yOdI2AoBoCS5RIB+jDPBoXijqZwHcW2ALPHgiIoaWQXDn+9v
- zYsYcjM/82MaJi/v14FfC1qlbtLcCsaVWWYU7Sev0zAdGQR5W9efLkXHoR+z
- VUL9Itaghxs781cxUUzz39KzxSQxHXvD7BRdDCqLjSO9cXrCmRJAlASC1mvU
- Mbdey/FtflKXb1icJIP9khSdN0lRmMSixg+kCYaC5FPSBPQNj133rQ5UQOrx
- CjYeVJwbQOc/Qs1m1vkJ7FO5ayHX5jhgFSCrbG1modbpaSU4h4yaPGTe2DUz
- kdFTFUSa6MO+OCiw2FNhW5mW71zl5RiF7//zq5TNg4bcA/cwQ9yM7qjMoKMx
- jygQIqVIvSVzvhQ3YuMhuDE1/CyD3bBJOhCPaApS5TCOQmG1gxLLZ7GWC0mE
- qMAiqHBqbsfnUiGmmOJNlq3GLT9zrnwfNjtHd0iNOS9ywKXv/z5huJEe+ody
- kJzAgE2N8q67q07xvVlVjgczpx5Unoqr0T7WMm4qfjMETvzvnXZDWQGblQLz
- 7VhxsSi51i50RV767AFtbk6GAgw=]
+ ENC[PKCS7,MIIOTQYJKoZIhvcNAQcDoIIOPjCCDjoCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAutSMdSCHNMnSQAidQt5A5eXTNNvVU1BsJxTb
+ lXX37CV5XjtRao7+B/hl8/QXXOf5neNCh/Q5yRcr47cyJnb4zFcJrIluWHeF
+ OSN4fDPogxIBixupVwWuEmxfDGUd+3QRmL8gEBXHVntzQPRW2AR7bgTldFy4
+ d6XpVnFSGLkH2C/RdWeCnKsgumbBITo0mJnNvHB7H7tPHxMMvsIbJvmqu9lC
+ OxJPZXIXnY6TlLuuIPiHpzrGsToB4dKrUYlQ9Y9KHHFN2NCRfMUNZkAd7vLR
+ ZLzTFq7XK3CaDqmAMWisbI2kBHf7GAkZJky+vxeRRsJ2B2JREw/JmqF5tD+Y
+ aVZz9DCCDQ4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEECubd68R7PosC6nC
+ SnB2SqCAggzg3aZRHoxfBmvg91xRcWB2UKb2azHGHfHjatP7dcL5EQ3l8JGd
+ fwzaUkb92HEtLBV9VqlNEnuZS3MKRxZGJFTtZ/P/Sg+gla5BEHgSX6YnGW41
+ s1JulZDqkrSecpnBQ3j+w9apExWv4dHFJJ4jlR+S1GaPh4RaKZisozc0Ln7+
+ zTZKKRWl/NCDPIw4+gpPpAWVH2xGpmUAv/kW1BGw1WQJDvr5sZ0+TgYybQbu
+ 24PI7u59wvyHiQx/qNmlk11AAw2ysvTG9hbwc0JrfbinV6eE6ibB/tloQNAl
+ /eGeNxxwOIKRFMQanWzsCUctdbUJxDoIyMBnFEf8muiLW/t4IND7+D/jK+wb
+ UnwKsZJv9uwzgGAAy2RANTDoOjPnxAN1Ikx9TapGd/TnyN1LvwGKw2YbqgBX
+ dyUqanIrHgr4SVvCr71Acw8qbUvt6NPMIgEAmF7+JD2J220WxpUu3yqYD9aS
+ i0XCmTW03ObUQVqJaW/weO7PzaPcN7hhHt/XnJC/ezXCpQl8+yc3cKyjUJY1
+ NI2RHztyp6Oill4FvBAkc1XAyVQGy8bpkAYh63ozQPuv9GlaCeL51/PYa6K9
+ AGHXPh7Zf96hpeY0qNyW3W6vu8gvL3ApGUxkI+dimC/wfwQuR5969aCYxNtu
+ siRVEUHXpIEZcGqP6dFDHieu3XC3/Dq9EPUvQ2gMO8M/SKAa4t0Ga5u2nvhD
+ xKO/UdbnP1SD9sBiL6Tlqp+iw3K+7opCho+2mJ5Z6+finL5I4ih9pNW/BONM
+ TN0J9ySDA7fFBMCM0mMlgkvd6/xts63tq8TxNn3SpJxL7RZTp2DDu8aH+gto
+ e1nDtg+f4LJwBbCpLNbN6G0Blq5IMoo0jTDuddJTig6/xaY1AcrKIWI8ZqHR
+ FAaFRJw0mhpn3R6psrEU464tvKQD5jQtlwUkYSV7M2CX9cGtgO0mw2YtNM/X
+ xTrOyymSxO64zQDce2N0m6p4/jPUPna2NLcLhxRvA4x9Esn8TEsyAUOOPv2L
+ 5fKQhOAfJmy7WxAR44phUexnsZIL6YculN+wJdkmBjYVrNm9b5XndXecbr09
+ knseandJDRPShJkVILCQ/HqlDGMy3Bg4IGup3jGW495o5NHF69ExmGHFu7zi
+ NAL2DwEqgJnfOllkwT6WTgGsJp8mXhg/2kY5zAJTb69dWGMGKKR1pHrJSyql
+ f3F6gPkop6Om0I795+u0eQPPQJu3/48n+1wvHuHG6gGLQI/2vqTv5f1cSz96
+ qCQ/5T/LQzrLwpsIlsrS6TBlboPEUHgw9v62naSVWwwqVZm4BRJQi+O1gqtw
+ Fwp+mNSn8RIZD7SVdlpGD0141FSYDXS3KuS3Qm9NCBSxVBrXgW/xKy02vDKb
+ 4eAmkxDB80VeTOLoq08bO+8gA6kksXEO6JR6ZEhH9d6DbyvwfgYws82sTi9V
+ 4t31pAFyFr2lERrP8dNchwiNbMrSYyY77+ko6MG0V/oAxPlPQyzNzM139JRz
+ H2vzIW/wq8+tNRDdvF7M0iK8EdPUj/Q6Q+BBKREp98ArjmjFLEWx8nRLjy48
+ O9BzJ9ZGZlKKxPwx3uFptPHMn//syZmVdEfqHdsXO1AWRbqOqj5dB65Dq/m4
+ +Bo/kXJAL/thltK7uO/F/yKrh686Dl2l49uQbTpksi7Sa/b+CHmWFmkzKvQH
+ eJ2SOdjjRjST83dlc8QMjkF2WqYf450j6rd2KzK32ZoeQbd9z7yM9/6imbs5
+ n7Cz6J7UE37EFdCO5YdAmnHEYrkJsF9MhSMYLfHa1t5UxeoYuTWdQLJ0k/G+
+ g/bI1UraseYYZjh6ldxU0skCW/aS58nFurFFlqBYdnKaUyH1IQ0EWCG1XMzn
+ qpI1rjtVy5LKi5aTFYYerXXmzYgNJo36YqP+7yYr+W4MQhT1px79dFLPTd/G
+ dlu1SlDMjkT5e/XS08nGxgIMXgbZP1bRlX8mx0sqkjlfEiQ1bLGavDyrz+aV
+ p5SpdGXpTREg+svWtrdCPMSne7AdSUhjlKFOwSDz4TWWojKv81LWys9OmeDI
+ dE8urQTOxcTgp1CL7PElWb5Yizl70PvBqBKQW6iXtZzRvislnYmhctcUu2T+
+ bwjEt4YIp1SwuklXdm4sskGpRSmGxYmqWEg7gasSVoQLdlLIUYG5EcyinTOe
+ wTuaZUnUjiCznLVn0Y2Ti8PF7dH4Dfm4SO8ZAyR8F68CLDsgefoaMfPo3mYg
+ Y4R5OywpS1ma90tpliF9IPh7YS66sUJS5GS7KFbeHRRxyLGUQM/fO/SgD48T
+ nIEKFDeqbVOHmyvUVQCTc6+1QLnWrh6ywc7WO3Li/MCEheuL7WVd+ANfrjUe
+ E1s+GIGg4TFc9CDCkDck/oc94gL7VtOJqgVpIy1XhtF1akaIbSoEJoP4oR0E
+ l4YpEEDX+v4CwGAeVfnHsnPCXgF73OTbxsg6604YChK7SXxdKMuBR0ThmEFM
+ Ir3aC56wR3Lbbjo4IVAUH9HvhImuJZ9h4mkl5DwCsAa+z7Zf8DYlDiz8ssrz
+ LvByHO018A+Ox/7pKekMVIiF8nboNNsDDgqblGkKkLRWOwHB3J/w5zeB/m5P
+ +iPSsB7Jp9g4QTUdG+PBoDQ7MI/i2vz7qnttP8KT4mDqd0ivznr9jWnrVL+v
+ SrDvH80hoa7sIcHaWjeMXUWTh0b0D/cMi5wSE5fG0kiZU5/cSiA+pVzgBO0A
+ 3+QXg+AYO60f233fkuvpJtdc6m4/E9pnKsXSsyGFPzn6/fUYDktzyYycOmnc
+ G/8fwwWT8iiUujpOb1vt/uR7GN4Ctph5F1pcR+YaqAi8URQPM0qrHL5EsmJH
+ HGhXzdc/M4HisYF0/TIhYDQqim0Uw7z0P1YRhW0TZiLtdwBYowQYfa9VJExX
+ HMGm7ljcb2WIrxdWqzAjo2mrae0spGwBsMimfJOQo7t1DPtceBYrQdzONcM5
+ EiJcRjb0+vDMCUqfT9G0hJh/5T1YexZg2uCtQTX2spglQYGA/XCVxhQwhY8j
+ PKGEwgo8tL13dfuxsRzyZH/VdKfcw4O1tXXIIrrIcrRZ3XIWXXlnd+dDHPwr
+ cnqlas2ZEXhgl2JufICUBtt0fUSjwrvaMXpHCo1SZLaAAOXrpZQ5q/dC4Mv1
+ KWAyllfGdFMY9152DUlpwieZuFSyN8KFOib3e+ADyfaFBdybrItvbGyftgRU
+ xS817bHHlCkOZ+Wm35/GZsTZgPtp2q4MvJXVLNtZp7NL1V7Ya62ww154ZOY/
+ RbyKLdzUrb4SezX4Ie9KEZH78dTzTKxKZgtjkW1x466HMv8FSMsSDL87hV9Q
+ B8T+zVTRMCs+fYXqi8BXdUBMT6j/CRw57U8Dwg+ECwBlyIFsdwkKCYoUGn5u
+ m5575yug7bsA1+qJbEMAH8JbhFWWu6p0Tqdfy+++4y6dGJ6EAfdnXnNdvO5l
+ yWl575+iUMgkFQONbcfwkrESuCaZA/kLkVIXkB89LTjPUrfQldYSc+g0Ycdu
+ xf0m9IDT5lcF3JFgEjr+cYQx5AR3VmFeHE2rQlZgxaBtAaQ7heGRUCYCcGFq
+ 2CAMf0+A9Ps7i8TWA5HtxQHRA+8pLX7XYV+RYSfkravU2CUueTVFyKBrxjL1
+ MkVh1TyVgkdxYsGtZfwYmxnSqgbnJM9q6g/IgCwLkFWnSx4ie6b7ViWiC7yI
+ 0AFK/xnqAAAKe0Ea35xJIoH7oCq8GClCMlf4Le8xm9/7CI1C1DMQT70pdORw
+ U1bAKkFNxm6gSG0qcjFemeiUvUgHJKW0qOYsSLSUF2ff53GpDkzjfoFOITol
+ PSIeSUVKF2kFR0rM8ua3wYypD1TDPxXSILfdAGOrvo6FUunB+QrScjbC5ra7
+ mpTZcofdgIo5yOdI2AoBoCS5RIB+jDPBoXijqZwHcW2ALPHgiIoaWQXDn+9v
+ zYsYcjM/82MaJi/v14FfC1qlbtLcCsaVWWYU7Sev0zAdGQR5W9efLkXHoR+z
+ VUL9Itaghxs781cxUUzz39KzxSQxHXvD7BRdDCqLjSO9cXrCmRJAlASC1mvU
+ Mbdey/FtflKXb1icJIP9khSdN0lRmMSixg+kCYaC5FPSBPQNj133rQ5UQOrx
+ CjYeVJwbQOc/Qs1m1vkJ7FO5ayHX5jhgFSCrbG1modbpaSU4h4yaPGTe2DUz
+ kdFTFUSa6MO+OCiw2FNhW5mW71zl5RiF7//zq5TNg4bcA/cwQ9yM7qjMoKMx
+ jygQIqVIvSVzvhQ3YuMhuDE1/CyD3bBJOhCPaApS5TCOQmG1gxLLZ7GWC0mE
+ qMAiqHBqbsfnUiGmmOJNlq3GLT9zrnwfNjtHd0iNOS9ywKXv/z5huJEe+ody
+ kJzAgE2N8q67q07xvVlVjgczpx5Unoqr0T7WMm4qfjMETvzvnXZDWQGblQLz
+ 7VhxsSi51i50RV767AFtbk6GAgw=]
profiles::icinga2_master::master_csr: |
- -----BEGIN CERTIFICATE REQUEST-----
- MIIEnjCCAoYCAQAwIzEhMB8GA1UEAwwYbW9uaXRvci5pbmZyYS5jYWNlcnQub3Jn
- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7Z9Yf0kd7Jo88QH/xhQN
- YvZrm3rL2nIz+B67HFgQu6Q1o6wqYvn6bccTjdQFhrHcDob9XpoCs18IwDIG9fBh
- NR5kph7XjVzv40vh3tjjzfkvoKzPyEDxJI98DTTkDKK3UfsvTL0PwlS1xrBRW8Ib
- bKmqNNA7p8VJJanzJCv0k7idpLmmyKeRoBF0HFaGynFcoOwjoLib9polUExD8kSR
- femOLwq46BGORX7id49J3DHPQv89dm4N0BPjnWGMd1x3puk+GgptEzFDNEigNmFe
- rojMKqoIhNEi4+bB3tz/aU6Sn0vm4Jm0tnlkrdX7O1nBvTvrwBa6jt94v0n9amvF
- V+LzKde4ukvn8FRoEmJMaiHgSMjlU0KwawhCqC67Rf+L+nwhi4o916BcLzCMkEHb
- CAW04uBZJdj29BwvWkfd7rrydUMZuBJIsKydJ13H9/kWUlsgqXayWpMl7qrJSx7X
- iY0Z909Nmu6+ZphlqesRcOFyZHB4hkBP8tZA9lYHOjSBFI340Fni38cMKrJQiyKA
- ZXUQmE/i3a1J5ZXuKmYjhha4A3MtEvxrXbWP7rokYCqShJO72ThGM6RRwnEmyL4J
- 46eRGHta3apZjOqjHjY9Za+bGbQFjQ12/YanP8DeXh4Y3vxwxu3jkUnOf0VF//qa
- v52iYXn9PnJlQ2GhRtTWoccCAwEAAaA2MDQGCSqGSIb3DQEJDjEnMCUwIwYDVR0R
- BBwwGoIYbW9uaXRvci5pbmZyYS5jYWNlcnQub3JnMA0GCSqGSIb3DQEBCwUAA4IC
- AQCt2+BVjtxBcuXqcHyAHIWjFke7gWAC4LH8hm7Gt5mcg5EKYANC0d7UNPM7k9vU
- bcZwN3sMYxfBLgrMZGpbzIXgRKxufMhTc1HSZzHs5Peq+pTz/F43dfxKOHZNWrW1
- PJoPUQwocK3MfKDjZVVnFT9PD1VwnhumTrGMRx+x/545F0tU2Zam0+vJor2VROzx
- Y7aQ2v1K0Ac4pEigL9Ld1/mou2q5PyLR5DO0zo5/u8+QP6Oqslgy+FJ6OmUZZUua
- 4G/1BVooLzbYIRRG/7kQNMmIIROQBCUP0upB7t9qvKvGs5JZwLLgv/M54yFtzI1z
- bjrYZ1AbC/XutJ81jV9HplLS8XTne3Q2NJ+C3m61VizRp04INtPmKsH1Fj4stU3w
- f0utTMTvcSeOsbIrl/rgeaEhou71sJdclqvSioAQlxdmAUqDPuffZgPnq5eeqNBL
- 9Q1dfJWjNzgKrK5wSpa43wgentHOLDsgylju/L0oDP5L0JWvpXIsB2M/maBTRxUc
- rZqKlRUxYBJ8XPsyzOQTgnJcZ+hmZTXZ7jDtP6qgLEtho+E0ubGtIpXBgeX5HN1U
- yTxDP2rWDE3fKgm17An4i+n+6IU4u0M+3s1dE0wrKpzUC2VbKBPrsGTRPNKCny7W
- UmvCla/Pixt8dYj9NTuBfoh5/m4A/uD/iVVVO54RA9u8Fg==
- -----END CERTIFICATE REQUEST-----
+ -----BEGIN CERTIFICATE REQUEST-----
+ MIIEnjCCAoYCAQAwIzEhMB8GA1UEAwwYbW9uaXRvci5pbmZyYS5jYWNlcnQub3Jn
+ MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7Z9Yf0kd7Jo88QH/xhQN
+ YvZrm3rL2nIz+B67HFgQu6Q1o6wqYvn6bccTjdQFhrHcDob9XpoCs18IwDIG9fBh
+ NR5kph7XjVzv40vh3tjjzfkvoKzPyEDxJI98DTTkDKK3UfsvTL0PwlS1xrBRW8Ib
+ bKmqNNA7p8VJJanzJCv0k7idpLmmyKeRoBF0HFaGynFcoOwjoLib9polUExD8kSR
+ femOLwq46BGORX7id49J3DHPQv89dm4N0BPjnWGMd1x3puk+GgptEzFDNEigNmFe
+ rojMKqoIhNEi4+bB3tz/aU6Sn0vm4Jm0tnlkrdX7O1nBvTvrwBa6jt94v0n9amvF
+ V+LzKde4ukvn8FRoEmJMaiHgSMjlU0KwawhCqC67Rf+L+nwhi4o916BcLzCMkEHb
+ CAW04uBZJdj29BwvWkfd7rrydUMZuBJIsKydJ13H9/kWUlsgqXayWpMl7qrJSx7X
+ iY0Z909Nmu6+ZphlqesRcOFyZHB4hkBP8tZA9lYHOjSBFI340Fni38cMKrJQiyKA
+ ZXUQmE/i3a1J5ZXuKmYjhha4A3MtEvxrXbWP7rokYCqShJO72ThGM6RRwnEmyL4J
+ 46eRGHta3apZjOqjHjY9Za+bGbQFjQ12/YanP8DeXh4Y3vxwxu3jkUnOf0VF//qa
+ v52iYXn9PnJlQ2GhRtTWoccCAwEAAaA2MDQGCSqGSIb3DQEJDjEnMCUwIwYDVR0R
+ BBwwGoIYbW9uaXRvci5pbmZyYS5jYWNlcnQub3JnMA0GCSqGSIb3DQEBCwUAA4IC
+ AQCt2+BVjtxBcuXqcHyAHIWjFke7gWAC4LH8hm7Gt5mcg5EKYANC0d7UNPM7k9vU
+ bcZwN3sMYxfBLgrMZGpbzIXgRKxufMhTc1HSZzHs5Peq+pTz/F43dfxKOHZNWrW1
+ PJoPUQwocK3MfKDjZVVnFT9PD1VwnhumTrGMRx+x/545F0tU2Zam0+vJor2VROzx
+ Y7aQ2v1K0Ac4pEigL9Ld1/mou2q5PyLR5DO0zo5/u8+QP6Oqslgy+FJ6OmUZZUua
+ 4G/1BVooLzbYIRRG/7kQNMmIIROQBCUP0upB7t9qvKvGs5JZwLLgv/M54yFtzI1z
+ bjrYZ1AbC/XutJ81jV9HplLS8XTne3Q2NJ+C3m61VizRp04INtPmKsH1Fj4stU3w
+ f0utTMTvcSeOsbIrl/rgeaEhou71sJdclqvSioAQlxdmAUqDPuffZgPnq5eeqNBL
+ 9Q1dfJWjNzgKrK5wSpa43wgentHOLDsgylju/L0oDP5L0JWvpXIsB2M/maBTRxUc
+ rZqKlRUxYBJ8XPsyzOQTgnJcZ+hmZTXZ7jDtP6qgLEtho+E0ubGtIpXBgeX5HN1U
+ yTxDP2rWDE3fKgm17An4i+n+6IU4u0M+3s1dE0wrKpzUC2VbKBPrsGTRPNKCny7W
+ UmvCla/Pixt8dYj9NTuBfoh5/m4A/uD/iVVVO54RA9u8Fg==
+ -----END CERTIFICATE REQUEST-----
profiles::icinga2_master::icingaweb_admins:
- icingaadmin
- jandd@cacert.org
@@ -312,79 +342,78 @@ profiles::icinga2_master::icingaweb_admins:
- mario@cacert.org
- dirk@cacert.org
profiles::icinga2_certificates::certificates:
- -
- name: monitor_client
+ - name: monitor_client
key: >
- ENC[PKCS7,MIILLQYJKoZIhvcNAQcDoIILHjCCCxoCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAfMlzYDhHEBOZ0ePImcGVWe8jUv833wi0GsRG
- oGrDtBq1G7bNe8Vjd+cpnuJtkIpvg4UUf6yU3rsMb3JL32rUUP9Jjhp8k/3D
- 8WLadEKRjahlw9kh+/iaz1AGZGiWM4CSpSOKJ24sfFr9djWm8XY0qLakY3q5
- fwz9xjKIwRhyF2bb1Z92fKNDFYO7Wa9lD7zbf7BraUAWpfL26lrpGkrZmqtM
- K4wd2RkVZe66azE0lT93aOIPrXwXWIVZL0u+6YFAQx5D/98qbtbwGEtabTSq
- TTuTikkV6nsq7eblsH3zjkT8olE3cY62VBPq1lKQNTgBWmgBbvebeRzJj8q/
- gpZNdjCCCe4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEPjAQ+687nD2HSP7
- xVzkMIWAggnAQ6dpcwNyBBKLNr4uYDAZerNqErnpRRnnJ62FpE2pR/MokRNO
- M309vB5EpbIBa09cn1PGMyQ7uaaIXydtUwxfeS6307Lfo46swoPyWvHNC+1B
- ngpiohRSJhiOUR8IUc3uwXNZ8YP8mo3bcjH9heq1WDMeAla8FiBtrdog2Rev
- bnD2A3S6ustUVIhdR9TCzIXgG1ExgW7oFUn5Iuppl8K6Wv9LPiCs/hLr20fy
- mg7QJaHHy49rm+L0X5Sf0Jg+gfHEQY5qg2NTqCb88fpYh7t4g8R5HY4QFame
- gFrj11ZeavxKrLakz0k0uB8weLUWWOE2xHj4mdh87obW5J/xwekZkYqOWHmU
- PLEyg9X441EMCBSYWFRz9HEK2Zv9Vg0qxKe++DNikVwDT9ntEYHnh43e7Iwp
- YKwvCtlxxvQGY09acLuC0l4pifpJOsqOcAUjxf3WXoe1cjsjEcL+Z3mMmerh
- 8JyXxJRp5Cu6TTMxcnQb/214/D8qYCKoPUYMddNC1G+XVosNY8QWbNp8nLUL
- DZHsvI0tgk+CV/SPRl68dx7cE1bYioyS4EausMQub4eQykZl5My9qRR5htSl
- C2zw+CP47EhsaA3zodbj6UgdYGBmhZNUOiW3oXWTKV0eSddkWcS/CmY271a9
- 6UIzE2TlRQ4w85GI8aD0W4DbsPyUvG0oay/lFYI6TzG1d6sL0rn/n1vvuUHB
- n1OSyMdzcnUS0V7mt3gmGIKCYfEjG1auMaXlLag/NPPi5lvAkn8t8fY0uRn9
- 3kYpAPCPHFpqP8L/ZwIyHf/ePvRszzbuU23wkmcguIx3+UqGvwOyaMTGiy1K
- 0ML0PUCMHPVrVDjkIHf9Tee/eFbRP9toQEofeesQtSJY6jW5zCCa/EEmmazy
- jyo1hdsSCcTpizMylT4NDGpdfc73ccMwoGcuSdTtlAolBhn0qbBvEMo/GQMZ
- JmvvOlE0BlDUGxbXE4XTrjIS2tJIL6Mrg0nQEJLB8u41i9fDJdPai3dwYlYZ
- oMUT/QX417fPKl88t6NwkfFpW8mgStqeZR0ataza5lzHC61d5C1z+Zxzh/yk
- oCgwmWFcz2kS8woi//0t3DtJB93bFbV0za9FUodcKrEcLowx3mN+g+URe5n0
- w7On4tjl4PGo5ko/15DDcRRlJlzQlUN28n0w3ENYaAgHiNKsksvXxqTL+mRo
- kDhszsQyaatutqtjN7Tj9t5p+gIkjODhz5FmQop+ZirXwNElMX7N3WeFD8Tl
- zLhopOuZ0loqaKWgTEY1hdYUINfkHTNyLIxwyYtJGPAU30q/c5qZ8opmil96
- tk6kpctBVAeNYVBfRNJYkGfNRrK7AiENuLaWGurGt05J00lSKOEQQXQuLqGy
- mPC694aJ26aqjinuWZ21TCLh+e+Oib0sVYWObCjy/cBGtMQAlvTGEt/1zs66
- K+r1C0PJkWcDwDAF0mwnxDxFq1zcPYBG8xH90DrSPMoN0edLFMencGVrqMBI
- agbUlkwePUdEc34zZ1khJbuBU/B0O8IRNY9rFQrU9ICCnKPVFvym85f0y8Ac
- BphEJrS61CDa/L7techS1GTP8joSoZnT/OzzqXRXBe9Pgp9hubcckbGwi20k
- sP4sCoChKe99wR4760z+q4JV91aVR/aKqAB+5R7aKor4ouQSaC203XzpDcOv
- x/t6+l4cPetOvV5dtqPtpv1L+nPoLr9w3JS+ZGLOwmXAAx7Zr/DD8RGd6hM/
- OHfplbHg4XYbbDG51OTj6ajRwDoDgcLQ6VHz4/3HmcaNff2VcY4DFxKSpv+D
- WSoepaN+KB+o1B4YRQ3XyuYhcAL7UlMJzA0CBmezZ2AMLTfGIaxFtwnqDMEc
- kJ+m7BP3cyk/E6CTBFVrQajC7C8Gs5nNqI1sS79pMk07S2dOX/MRFSP0hw8i
- ploMyzV6tCPAF/h9OO510W3iOqSN6nQe61BGlTgMgWKut4VWunpqZyANkIvT
- SIeTR09cpSI5fhWfMdjv07TocakibiWFRZpvpOd0dkVA0FR5BurPxYoUB0od
- FkWPGlgfTVCVuVLfVjEgig2j+YzoZM3Y/GkVu7IVkaxGI8+/uq6Hyordk051
- uDxbNDiuq0mXfL6KTiPJ/3TVPPLUnnFvEdWvgLIg4wnHpXxpkF44dFkKF4/y
- d5Ykxpc6eThoV8aIVMUl5dod68LjclHL0Iv3l7+rTE6qPrTiShONvQbIu8lv
- 5KXBK6GdjTFWz8c9Lr6zR/ABQ+XhQAlCqmwhfp+rEr1qReBEus5U4bL1ObuB
- 1AA0r6AlmjCLH9F9BA3PcNVi5Zm988chcoCjl1GTjeMVcK501l9/KYcSjIzZ
- bfaguVPCiSGG0/imDQ/QiBtDNGKHbdknJlTjBBaGWJkCFu/vpV6uzjfzMXRO
- FXc/E31UdogZfprKRt1c1WHW8ozo8hV6/2D4X+tB1Jn4bELIgSZRhB7d29tm
- jAxd8kAsCDsIK5NX0VXXzenZcut1L10lDVHcr+WOTT5lbGLgZCa508ExdtQk
- /FsgqnzNOrqlCBx2gYU9UcrMxlOf7teEHxJmoFMqe7II2M/ye6eBYdy515GR
- ywU0R8pRUuSs8njm7rYeuzG3rCd1j4RCasjbmLQLkuAVlxPjys+Hxe07jb8b
- N4VyAQsUaFruuwkIUanANJdaOA72IJyPJCZf4HCScQEKG1EkU6oHNDelE0J/
- J9zTdzuUSwfv74pk/2PExloRH42glTAB/FOoIenzrtO7XvsV+HAaqoqJQ1Gr
- 7lvjwU0B8GMijM20YQPOzhc9H34BWya5Y8BAaTbue+puAIjfLQaMPIcy/ilh
- qIrVd1sNXCJtXJ2Smo5O3wGI3Qw29pQn98x20pJUCwXwLtdRWSocSL7qWlAh
- pofd1vZ+5F5iW1XOm9//SIZ3lgHlEsWwnBL1v6mETXPA6UezJGSm2fhI14xx
- EnFI3t1K0+JSkHq45nyxHGfiS1KcHvrblNnGOHWfxKDjdIKADAMI6yP3pWrQ
- 2kmTSMSRcAN9TQxd2sFsLVe7zpFxBagp1SaXzKC/VpmWQu6Y6BNt6EjmZ7+r
- UjpnfOY8H2efR2aNzMEdvtz/mY9pdzLSHIDNSndM+RqccpbcyJKTQXIdjHiZ
- iHpfoZJ6g4VdkaXVRttaNfjuuwuAJuUaxoSdDOeswHIOIeNQ2N8e5OE0U4r7
- xvd/XDaPh2AE1061vN+InhW9lC2QrIxSrHzQoz0uVVq23D1aMyin8UHTTo1e
- h8zTkvycy4d/FiozapuXBuM49p8DgcX0kESTVnL4A99qzFr7PU4CWDQssgkU
- WGs3X/Ut0GKaJXFMwajblcJu80p7HRmaXJWIBmwe]
+ ENC[PKCS7,MIILLQYJKoZIhvcNAQcDoIILHjCCCxoCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAfMlzYDhHEBOZ0ePImcGVWe8jUv833wi0GsRG
+ oGrDtBq1G7bNe8Vjd+cpnuJtkIpvg4UUf6yU3rsMb3JL32rUUP9Jjhp8k/3D
+ 8WLadEKRjahlw9kh+/iaz1AGZGiWM4CSpSOKJ24sfFr9djWm8XY0qLakY3q5
+ fwz9xjKIwRhyF2bb1Z92fKNDFYO7Wa9lD7zbf7BraUAWpfL26lrpGkrZmqtM
+ K4wd2RkVZe66azE0lT93aOIPrXwXWIVZL0u+6YFAQx5D/98qbtbwGEtabTSq
+ TTuTikkV6nsq7eblsH3zjkT8olE3cY62VBPq1lKQNTgBWmgBbvebeRzJj8q/
+ gpZNdjCCCe4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEPjAQ+687nD2HSP7
+ xVzkMIWAggnAQ6dpcwNyBBKLNr4uYDAZerNqErnpRRnnJ62FpE2pR/MokRNO
+ M309vB5EpbIBa09cn1PGMyQ7uaaIXydtUwxfeS6307Lfo46swoPyWvHNC+1B
+ ngpiohRSJhiOUR8IUc3uwXNZ8YP8mo3bcjH9heq1WDMeAla8FiBtrdog2Rev
+ bnD2A3S6ustUVIhdR9TCzIXgG1ExgW7oFUn5Iuppl8K6Wv9LPiCs/hLr20fy
+ mg7QJaHHy49rm+L0X5Sf0Jg+gfHEQY5qg2NTqCb88fpYh7t4g8R5HY4QFame
+ gFrj11ZeavxKrLakz0k0uB8weLUWWOE2xHj4mdh87obW5J/xwekZkYqOWHmU
+ PLEyg9X441EMCBSYWFRz9HEK2Zv9Vg0qxKe++DNikVwDT9ntEYHnh43e7Iwp
+ YKwvCtlxxvQGY09acLuC0l4pifpJOsqOcAUjxf3WXoe1cjsjEcL+Z3mMmerh
+ 8JyXxJRp5Cu6TTMxcnQb/214/D8qYCKoPUYMddNC1G+XVosNY8QWbNp8nLUL
+ DZHsvI0tgk+CV/SPRl68dx7cE1bYioyS4EausMQub4eQykZl5My9qRR5htSl
+ C2zw+CP47EhsaA3zodbj6UgdYGBmhZNUOiW3oXWTKV0eSddkWcS/CmY271a9
+ 6UIzE2TlRQ4w85GI8aD0W4DbsPyUvG0oay/lFYI6TzG1d6sL0rn/n1vvuUHB
+ n1OSyMdzcnUS0V7mt3gmGIKCYfEjG1auMaXlLag/NPPi5lvAkn8t8fY0uRn9
+ 3kYpAPCPHFpqP8L/ZwIyHf/ePvRszzbuU23wkmcguIx3+UqGvwOyaMTGiy1K
+ 0ML0PUCMHPVrVDjkIHf9Tee/eFbRP9toQEofeesQtSJY6jW5zCCa/EEmmazy
+ jyo1hdsSCcTpizMylT4NDGpdfc73ccMwoGcuSdTtlAolBhn0qbBvEMo/GQMZ
+ JmvvOlE0BlDUGxbXE4XTrjIS2tJIL6Mrg0nQEJLB8u41i9fDJdPai3dwYlYZ
+ oMUT/QX417fPKl88t6NwkfFpW8mgStqeZR0ataza5lzHC61d5C1z+Zxzh/yk
+ oCgwmWFcz2kS8woi//0t3DtJB93bFbV0za9FUodcKrEcLowx3mN+g+URe5n0
+ w7On4tjl4PGo5ko/15DDcRRlJlzQlUN28n0w3ENYaAgHiNKsksvXxqTL+mRo
+ kDhszsQyaatutqtjN7Tj9t5p+gIkjODhz5FmQop+ZirXwNElMX7N3WeFD8Tl
+ zLhopOuZ0loqaKWgTEY1hdYUINfkHTNyLIxwyYtJGPAU30q/c5qZ8opmil96
+ tk6kpctBVAeNYVBfRNJYkGfNRrK7AiENuLaWGurGt05J00lSKOEQQXQuLqGy
+ mPC694aJ26aqjinuWZ21TCLh+e+Oib0sVYWObCjy/cBGtMQAlvTGEt/1zs66
+ K+r1C0PJkWcDwDAF0mwnxDxFq1zcPYBG8xH90DrSPMoN0edLFMencGVrqMBI
+ agbUlkwePUdEc34zZ1khJbuBU/B0O8IRNY9rFQrU9ICCnKPVFvym85f0y8Ac
+ BphEJrS61CDa/L7techS1GTP8joSoZnT/OzzqXRXBe9Pgp9hubcckbGwi20k
+ sP4sCoChKe99wR4760z+q4JV91aVR/aKqAB+5R7aKor4ouQSaC203XzpDcOv
+ x/t6+l4cPetOvV5dtqPtpv1L+nPoLr9w3JS+ZGLOwmXAAx7Zr/DD8RGd6hM/
+ OHfplbHg4XYbbDG51OTj6ajRwDoDgcLQ6VHz4/3HmcaNff2VcY4DFxKSpv+D
+ WSoepaN+KB+o1B4YRQ3XyuYhcAL7UlMJzA0CBmezZ2AMLTfGIaxFtwnqDMEc
+ kJ+m7BP3cyk/E6CTBFVrQajC7C8Gs5nNqI1sS79pMk07S2dOX/MRFSP0hw8i
+ ploMyzV6tCPAF/h9OO510W3iOqSN6nQe61BGlTgMgWKut4VWunpqZyANkIvT
+ SIeTR09cpSI5fhWfMdjv07TocakibiWFRZpvpOd0dkVA0FR5BurPxYoUB0od
+ FkWPGlgfTVCVuVLfVjEgig2j+YzoZM3Y/GkVu7IVkaxGI8+/uq6Hyordk051
+ uDxbNDiuq0mXfL6KTiPJ/3TVPPLUnnFvEdWvgLIg4wnHpXxpkF44dFkKF4/y
+ d5Ykxpc6eThoV8aIVMUl5dod68LjclHL0Iv3l7+rTE6qPrTiShONvQbIu8lv
+ 5KXBK6GdjTFWz8c9Lr6zR/ABQ+XhQAlCqmwhfp+rEr1qReBEus5U4bL1ObuB
+ 1AA0r6AlmjCLH9F9BA3PcNVi5Zm988chcoCjl1GTjeMVcK501l9/KYcSjIzZ
+ bfaguVPCiSGG0/imDQ/QiBtDNGKHbdknJlTjBBaGWJkCFu/vpV6uzjfzMXRO
+ FXc/E31UdogZfprKRt1c1WHW8ozo8hV6/2D4X+tB1Jn4bELIgSZRhB7d29tm
+ jAxd8kAsCDsIK5NX0VXXzenZcut1L10lDVHcr+WOTT5lbGLgZCa508ExdtQk
+ /FsgqnzNOrqlCBx2gYU9UcrMxlOf7teEHxJmoFMqe7II2M/ye6eBYdy515GR
+ ywU0R8pRUuSs8njm7rYeuzG3rCd1j4RCasjbmLQLkuAVlxPjys+Hxe07jb8b
+ N4VyAQsUaFruuwkIUanANJdaOA72IJyPJCZf4HCScQEKG1EkU6oHNDelE0J/
+ J9zTdzuUSwfv74pk/2PExloRH42glTAB/FOoIenzrtO7XvsV+HAaqoqJQ1Gr
+ 7lvjwU0B8GMijM20YQPOzhc9H34BWya5Y8BAaTbue+puAIjfLQaMPIcy/ilh
+ qIrVd1sNXCJtXJ2Smo5O3wGI3Qw29pQn98x20pJUCwXwLtdRWSocSL7qWlAh
+ pofd1vZ+5F5iW1XOm9//SIZ3lgHlEsWwnBL1v6mETXPA6UezJGSm2fhI14xx
+ EnFI3t1K0+JSkHq45nyxHGfiS1KcHvrblNnGOHWfxKDjdIKADAMI6yP3pWrQ
+ 2kmTSMSRcAN9TQxd2sFsLVe7zpFxBagp1SaXzKC/VpmWQu6Y6BNt6EjmZ7+r
+ UjpnfOY8H2efR2aNzMEdvtz/mY9pdzLSHIDNSndM+RqccpbcyJKTQXIdjHiZ
+ iHpfoZJ6g4VdkaXVRttaNfjuuwuAJuUaxoSdDOeswHIOIeNQ2N8e5OE0U4r7
+ xvd/XDaPh2AE1061vN+InhW9lC2QrIxSrHzQoz0uVVq23D1aMyin8UHTTo1e
+ h8zTkvycy4d/FiozapuXBuM49p8DgcX0kESTVnL4A99qzFr7PU4CWDQssgkU
+ WGs3X/Ut0GKaJXFMwajblcJu80p7HRmaXJWIBmwe]
certificate: |
-----BEGIN CERTIFICATE-----
- MIIGUzCCBDugAwIBAgIDAvEzMA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB
+ MIIGUzCCBDugAwIBAgIDAvqLMA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB
Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV
- BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjEwNzE2MjIyMTMwWhcNMjIwNzE2
- MjIyMTMwWjCBrzELMAkGA1UEBhMCQVUxDDAKBgNVBAgTA05TVzEPMA0GA1UEBxMG
+ BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMjIwNjE4MTAyMTIwWhcNMjMwNjE4
+ MTAyMTIwWjCBrzELMAkGA1UEBhMCQVUxDDAKBgNVBAgTA05TVzEPMA0GA1UEBxMG
U3lkbmV5MRQwEgYDVQQKEwtDQWNlcnQgSW5jLjEcMBoGA1UECxMTSW5mcmFzdHJ1
Y3R1cmUgVGVhbTEjMCEGA1UEAxMaQ0FjZXJ0IGV4dGVybmFsIG1vbml0b3Jpbmcx
KDAmBgkqhkiG9w0BCQEWGW1vbml0b3ItY2xpZW50QGNhY2VydC5vcmcwggGiMA0G
@@ -404,17 +433,17 @@ profiles::icinga2_certificates::certificates:
IgYIKwYBBQUHMAGGFmh0dHA6Ly9vY3NwLmNhY2VydC5vcmcwOAYDVR0fBDEwLzAt
oCugKYYnaHR0cDovL2NybC5jYWNlcnQub3JnL2NsYXNzMy1yZXZva2UuY3JsMCQG
A1UdEQQdMBuBGW1vbml0b3ItY2xpZW50QGNhY2VydC5vcmcwDQYJKoZIhvcNAQEN
- BQADggIBAHFHlSHLdUIjuFfW2UxuCO3cBb70iU64PGeE1fTOQ1A+z3BO27bzuhH+
- jL9k0p1eTcrfcsJm9Q927WIFKaXHLAsC2E3hOtaaxPSPWzI0Aquv+BSoDd9GrQcH
- VjfAb0mPhgN9VqgdxnAFweNl6F231aq6ryxQIe4G/DDvPMQiAn3x5IUzIHgfO+L4
- xmwqu8V/biKijYclqAnIiVXYJqLMi8OPJ5o98LZudzDdhDd/6U3n8NE7qNUns1Rj
- 2GoDNFtJecGtGTLBShQTxIwfIBNOfHQjlZo0HXOoCzsMGUsT8sAKGJTprsrRdQ8g
- mj5663nnZveb0kTZdkRYZBVKwRkznAZj9ITZLj+eLXQb3Wi5BR4Rev7KdWRcE0P4
- Qdeeb9MvnM3CR5MWG9uEIZNz8TYYAxcNvjYOcEDStvqNrJ164iTierItL8Mmpnii
- 0hKDfCt08IS5S6uOHGRz+qYudB8l5uTCXdhCFqaZs4CMGUM9sylfPnMB91M5oKxB
- 7QNsTmv5qc2L62YolNpMRmQjwy3RNnLIOlcg6kkLRNTrACStYGsLVDntnLRLMrZf
- L4269s/c7qifundMMNipycxPtxtYYLZ6wl2WTVEsE175wtEPJwirK9p7NZWP0Zi+
- ZjFKUtPcj79ZDzJU4hI61SZFkTKXnOmBDj/wb3xntXueXsw9H9un
+ BQADggIBAJwRD14Jv/b0tU28CUBwp35wiez99dIbNRmcKoZ7Fghf50Rg6y+eOVo4
+ og8Tmoez6lLEzQJ1n/4WuMgnbOhhMRguCESKY90vORFC/xdc4lcOQx5rdvvj0RSQ
+ WBC2IE5eeTA3mAiagFdrYK0U/uPd7qlz6XMrPZqB68/7K0dov+afIXeNAwpKNd13
+ QCo56aygf3CiV1OiZ3IUH8YRax93kntV9Hmytx2iYDOqcM2OZB0P9GknHSWi5NGM
+ pCAFdZoLc1O+tn8Mh2AXSjerDVrnKkl0bfNNWyMnosdSEnO6awGlVsL+fDvqVL1x
+ KG9WmHJggWO/0xIrjAUBxPYl+4pJcl6O82PBRwpnVLQ9vY4Qoez7suaXmHt2cmDu
+ DrCtg7/RcgOi2bWY/GYRulSWNFKj3OfV5VDTVVPKqYVzOzHPsKtu1vEuKdxJKSRK
+ b/+KmWGnspEJXCZsoDiK3UcP/2IEX30PCpY/r/otCjXcZEahxg2Pkphrg7k5gJWB
+ C0fSPyoj3VYhJvNCPmCwLk8MDQK8XjJdi+K+5yGBb6wLeEjIwJXZZ+1Srvf4X/YK
+ lxP5NDdVSj02lC+/ydBg5yZF2IDsKkyb5FcH/Ng8reDsZDOj7CzUrvQgjpAqGrWp
+ jbv7XaRehD3SWuYfyc3twGGh2TrWMz24UIyKrco3CA+w3U06/Gip
-----END CERTIFICATE-----
profiles::x509cert_common::certificates:
'monitor.cacert.org':
diff --git a/hieradata/nodes/motion.yaml b/hieradata/nodes/motion.yaml
index c719313..d774543 100644
--- a/hieradata/nodes/motion.yaml
+++ b/hieradata/nodes/motion.yaml
@@ -4,38 +4,38 @@ classes:
profiles::base::admins:
- jandd
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAS9KablO0ZUn6gFXJYLMgWRb9gGWoR5SsVvow
- 2bFqpyHFUsgtlb5hm+E6XvZxrD56FI9twxSSuTdHhW+hUf1WQr34Ik/M1kFJ
- XYFKUn4WDoejCwxGYbqbptyJhPMsJh7Qgx0d7SQhrordLoI7SQ8kEbTT5yo+
- oEBPYXoTunQrkB7pSgfThRwLZPZ+xsbDPimp66imBWgXoSFBI2OO9dLVshGJ
- +M//INVZG6dOF9tPjxeKz5tTiKdZ7Qkh8/lzQrSA6PHW3MDCtxwjejCQlZjp
- 8S5bFy/Ajp7amCL5b7k/bXGX6UPHMqWgLKu0+vH5IPPe4i8Y5sU6nzOhY1mH
- pINd2zBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBFDA0rqy9ELGvgfhPS
- 826ogDClIoHwcGV6JFe+nACOgye8JBdCkvUJmlEdPUawmLrjto1ZtVHHsCks
- XJx1XYBR3vY=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAS9KablO0ZUn6gFXJYLMgWRb9gGWoR5SsVvow
+ 2bFqpyHFUsgtlb5hm+E6XvZxrD56FI9twxSSuTdHhW+hUf1WQr34Ik/M1kFJ
+ XYFKUn4WDoejCwxGYbqbptyJhPMsJh7Qgx0d7SQhrordLoI7SQ8kEbTT5yo+
+ oEBPYXoTunQrkB7pSgfThRwLZPZ+xsbDPimp66imBWgXoSFBI2OO9dLVshGJ
+ +M//INVZG6dOF9tPjxeKz5tTiKdZ7Qkh8/lzQrSA6PHW3MDCtxwjejCQlZjp
+ 8S5bFy/Ajp7amCL5b7k/bXGX6UPHMqWgLKu0+vH5IPPe4i8Y5sU6nzOhY1mH
+ pINd2zBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBFDA0rqy9ELGvgfhPS
+ 826ogDClIoHwcGV6JFe+nACOgye8JBdCkvUJmlEdPUawmLrjto1ZtVHHsCks
+ XJx1XYBR3vY=]
profiles::cacert_boardvoting::cookie_secret: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAH+GZS+H+iQKPzWUCsOXE/Lc8V5qIYleMqHZH
- 93LcnFX0m9gY6CEEDkSzlcnrtyPUsMGubmb6lIJ1zvFLxhf1HNCkJzzDxj6G
- X6cbP32QDDO7q/Gs961nuVCW2t7JysiZ+WHXTOzb5u3kHDXkdugOpxkZC19k
- Z/K7u1RFn2kxiLziWWyla6t8oCjyIfR43XeckSpHskRKS29baVKLRSz9qlFX
- saQy/KpnxNpPmIASpYOmNO8NcU7Fzfo1QfnNkjFpwxh4SbVI4CvhVWX1WdU6
- koP5e3qETucQa4eTgCS8ZwNN8IWkPMgKr+bWjYSdAI6M9pjZ2hkOfxstQ0tu
- HRjC/zBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBkBZdsVnxBj8ejMMe+
- lY7ygDA6eB64BpOOfiTQ2gdnHagIv9JeFwW9wGaD6wc+HZKfu5UKEFlkpkMg
- M9wxxAhBUlc=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAH+GZS+H+iQKPzWUCsOXE/Lc8V5qIYleMqHZH
+ 93LcnFX0m9gY6CEEDkSzlcnrtyPUsMGubmb6lIJ1zvFLxhf1HNCkJzzDxj6G
+ X6cbP32QDDO7q/Gs961nuVCW2t7JysiZ+WHXTOzb5u3kHDXkdugOpxkZC19k
+ Z/K7u1RFn2kxiLziWWyla6t8oCjyIfR43XeckSpHskRKS29baVKLRSz9qlFX
+ saQy/KpnxNpPmIASpYOmNO8NcU7Fzfo1QfnNkjFpwxh4SbVI4CvhVWX1WdU6
+ koP5e3qETucQa4eTgCS8ZwNN8IWkPMgKr+bWjYSdAI6M9pjZ2hkOfxstQ0tu
+ HRjC/zBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBkBZdsVnxBj8ejMMe+
+ lY7ygDA6eB64BpOOfiTQ2gdnHagIv9JeFwW9wGaD6wc+HZKfu5UKEFlkpkMg
+ M9wxxAhBUlc=]
profiles::cacert_boardvoting::csrf_key: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAIrQdj2r/LUGR929i202pTLTvG6vplBCOkZ3f
- /29l5wR1aajD0Kz8Jfs14PAO0a5IEksQwf875uJPKjOCWZS+WlJgrpqGHXt1
- OU89MN0ZmhsNtejQq355WmG2sY5z7PO/xfUcEAYuOcZO5a89Mitf18v+dRqy
- UEpXHsvlUI/5wCz2KNqL7BCkd/50Z+TE4OGPM4bZzvio48tUZhBMLHDUU3hr
- PQsOhih8y1qoDdFUvypp9SIqF5VWX+I9v1qhcnYpPGc2nQLEpSs9Wp3xMJhm
- owKy6zxmO2/0GUVMX6NQaIk6XLthHVgW7au3wPC5WV0pVxBgXQxDQFuWSN7W
- BUkT9DBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCYfwhgtuCfhI8cy/Lr
- /jX1gDDj1Mft02q1naNtqZy5rVQSTdbsiaN2LbufDSFaSyOKWkRcGEBXvtzx
- g9VtuODC3gU=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAIrQdj2r/LUGR929i202pTLTvG6vplBCOkZ3f
+ /29l5wR1aajD0Kz8Jfs14PAO0a5IEksQwf875uJPKjOCWZS+WlJgrpqGHXt1
+ OU89MN0ZmhsNtejQq355WmG2sY5z7PO/xfUcEAYuOcZO5a89Mitf18v+dRqy
+ UEpXHsvlUI/5wCz2KNqL7BCkd/50Z+TE4OGPM4bZzvio48tUZhBMLHDUU3hr
+ PQsOhih8y1qoDdFUvypp9SIqF5VWX+I9v1qhcnYpPGc2nQLEpSs9Wp3xMJhm
+ owKy6zxmO2/0GUVMX6NQaIk6XLthHVgW7au3wPC5WV0pVxBgXQxDQFuWSN7W
+ BUkT9DBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCYfwhgtuCfhI8cy/Lr
+ /jX1gDDj1Mft02q1naNtqZy5rVQSTdbsiaN2LbufDSFaSyOKWkRcGEBXvtzx
+ g9VtuODC3gU=]
profiles::x509cert_common::certificates:
'motion.cacert.org':
certificate: |
diff --git a/hieradata/nodes/nextcloud.yaml b/hieradata/nodes/nextcloud.yaml
index 10c5698..8241399 100644
--- a/hieradata/nodes/nextcloud.yaml
+++ b/hieradata/nodes/nextcloud.yaml
@@ -5,13 +5,13 @@ profiles::base::admins:
- jandd
- sat
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAf/+tramMebPzMWd/i/zMwITL4i0ZYjw56aoo
- Dy0XUs0W70Im3urRUQuZuwnTofhlgommsgaYdcpZbyNT0SZezMQN8IE9davi
- Yje6meB24OnsEHrdG72ZaKil/jZwSrI9IZiQcI2iQ9jQLE2of64ZJSQAQV/o
- WuE6hqHRrdNeX/mZfxNP5POqZCtKItLOP7D4rtYIOJXg1cH1auR2QG/ScSgI
- RGbDb1hxvYtzBC9mrpVMVKJANtqoWVCJtBCzy1s54U8bPnO40J8jBL6zhzQG
- BtFGXFZmI9824b2R+4v4MG/1Bwom+QPD1a3W+h+g4QIJg6QI0j9+9Wwe28fN
- ZKBdCjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCyGoJBFH0OR6RkKgsM
- grOdgDD+phhOfhpxDR186OX0h79GOz5cVdVFBoV/OiKCUjYuKfjFzFuCGw1x
- UkfGGUOJXho=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAf/+tramMebPzMWd/i/zMwITL4i0ZYjw56aoo
+ Dy0XUs0W70Im3urRUQuZuwnTofhlgommsgaYdcpZbyNT0SZezMQN8IE9davi
+ Yje6meB24OnsEHrdG72ZaKil/jZwSrI9IZiQcI2iQ9jQLE2of64ZJSQAQV/o
+ WuE6hqHRrdNeX/mZfxNP5POqZCtKItLOP7D4rtYIOJXg1cH1auR2QG/ScSgI
+ RGbDb1hxvYtzBC9mrpVMVKJANtqoWVCJtBCzy1s54U8bPnO40J8jBL6zhzQG
+ BtFGXFZmI9824b2R+4v4MG/1Bwom+QPD1a3W+h+g4QIJg6QI0j9+9Wwe28fN
+ ZKBdCjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCyGoJBFH0OR6RkKgsM
+ grOdgDD+phhOfhpxDR186OX0h79GOz5cVdVFBoV/OiKCUjYuKfjFzFuCGw1x
+ UkfGGUOJXho=]
diff --git a/hieradata/nodes/pgsql.yaml b/hieradata/nodes/pgsql.yaml
index c0eba3c..cfa6ced 100644
--- a/hieradata/nodes/pgsql.yaml
+++ b/hieradata/nodes/pgsql.yaml
@@ -4,13 +4,13 @@ classes:
profiles::base::admins:
- jandd
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAXb21L9FKfx91iFN/59W2NWuqbDHNZpx8pvGx
- 55uP3PdxPy1dWiv11mxkPt0hQNNAGdPbCRrWWjyIp0MccEWDgKEtMGz6yI0q
- InvLHpOihv3siGbIbOgWH5wNkQ+ab8syeVG/GKLcU9kJTHOLP47wyqYGSw2m
- r4bluOe3WqMbbFmvqrT3lxuyNNPaXR7jrcvyIGLH24no6VNooBoa6+yoZY6f
- VPKJeHfvflikXBn3UuGWPTTaoqoj180ZNfm0nI+p1kRHU+i1MwjQLzNihODV
- PA3WIC6Dciu3JMhm4IsgeN/sUEbM4iVkr/8U88aqulgYnPqhIpKKGVtn2zXJ
- HVJFyTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDBon/BhIcdE1/J67sF
- euz8gDA6h1hNPUkDjIxqD1njBbKSkD1HWtOndHeVQBrYA/8xv10laBcQoprd
- pryxipVIgkc=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAXb21L9FKfx91iFN/59W2NWuqbDHNZpx8pvGx
+ 55uP3PdxPy1dWiv11mxkPt0hQNNAGdPbCRrWWjyIp0MccEWDgKEtMGz6yI0q
+ InvLHpOihv3siGbIbOgWH5wNkQ+ab8syeVG/GKLcU9kJTHOLP47wyqYGSw2m
+ r4bluOe3WqMbbFmvqrT3lxuyNNPaXR7jrcvyIGLH24no6VNooBoa6+yoZY6f
+ VPKJeHfvflikXBn3UuGWPTTaoqoj180ZNfm0nI+p1kRHU+i1MwjQLzNihODV
+ PA3WIC6Dciu3JMhm4IsgeN/sUEbM4iVkr/8U88aqulgYnPqhIpKKGVtn2zXJ
+ HVJFyTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDBon/BhIcdE1/J67sF
+ euz8gDA6h1hNPUkDjIxqD1njBbKSkD1HWtOndHeVQBrYA/8xv10laBcQoprd
+ pryxipVIgkc=]
diff --git a/hieradata/nodes/proxyin.yaml b/hieradata/nodes/proxyin.yaml
index cd93e55..dc8bdf3 100644
--- a/hieradata/nodes/proxyin.yaml
+++ b/hieradata/nodes/proxyin.yaml
@@ -66,13 +66,13 @@ profiles::sniproxy::forwarded:
- name: www.test3.cacert.org
ip: "10.0.0.149"
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAVh+d4e8x8Tub+RMVEeyllfUZz2VGaqIL0mW7
- ut0O6rBk61BKV08M6FlxZs8n/fE8WrYi+xGHKYaHdLpOZZ4BTxCWubhuRN5Z
- RG7hQ25+dWuzKCu3OmICzDbLRYeIVCe3b+H79OgTKRMTcq3bdZz5e8uC24QB
- D2ZJaLAZnqptmpuUNTUk+fObr7hbQRMcNCJh9F9gxiuzbHMbK81GTZiPRIja
- zEgkOa1/YPW+z/wCN8/eq28j9EHmWdFa1VH65J90EZHDCOP+6rio+cyNMO62
- Sy68oyvneM/jpCyMP6Gy6yfJV010gsgjuqXVpgaCY/vG6Hj8QgXak47cZwIs
- j6XoNDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCTWSRL9jrFqf3OQfAJ
- ovhwgDBsBmXU7Yn2QlrQEQRNcDMbVxvawLN5AO+hYWPXyCUX8+9vyiWXwBCY
- noKDG2x54fE=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAVh+d4e8x8Tub+RMVEeyllfUZz2VGaqIL0mW7
+ ut0O6rBk61BKV08M6FlxZs8n/fE8WrYi+xGHKYaHdLpOZZ4BTxCWubhuRN5Z
+ RG7hQ25+dWuzKCu3OmICzDbLRYeIVCe3b+H79OgTKRMTcq3bdZz5e8uC24QB
+ D2ZJaLAZnqptmpuUNTUk+fObr7hbQRMcNCJh9F9gxiuzbHMbK81GTZiPRIja
+ zEgkOa1/YPW+z/wCN8/eq28j9EHmWdFa1VH65J90EZHDCOP+6rio+cyNMO62
+ Sy68oyvneM/jpCyMP6Gy6yfJV010gsgjuqXVpgaCY/vG6Hj8QgXak47cZwIs
+ j6XoNDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCTWSRL9jrFqf3OQfAJ
+ ovhwgDBsBmXU7Yn2QlrQEQRNcDMbVxvawLN5AO+hYWPXyCUX8+9vyiWXwBCY
+ noKDG2x54fE=]
diff --git a/hieradata/nodes/puppet.yaml b/hieradata/nodes/puppet.yaml
index e8b6047..983ba9a 100644
--- a/hieradata/nodes/puppet.yaml
+++ b/hieradata/nodes/puppet.yaml
@@ -10,26 +10,26 @@ profiles::puppet_server::git_pull_directories:
master: /etc/puppetlabs/code/environments/production
training: /etc/puppetlabs/code/environments/training
profiles::puppet_server::git_pull_ssh_passphrase: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAhbUQYK6aL9A43CJJoXTpgpEvKny739PCf4pQ
- pn4hkzJPV+j8+9AOIMPF9Jl4ZWJP1nClEia7/or5/ACeDzs1mIDejf7OXW2o
- nBV2QQs34VgFTNyD+szaouftcPJK25/2/EwGzn7XCnefd7xiEd1xxtogDHTp
- VDxcZMuA1/OJ7PYSkYkzRPzwHKUuqqOl2uUPZquOpQgJEYC7lkDePNd8zFvp
- XmXjaL27EhXyn3tvAjytHOhSU24F0xspK0+Xuv46AIQLztMFO5MItefUQrXF
- xSUdHR1h558pJf45YRxT9nmiDLdFUt8hLl0aUep7+kkG+7pSytQJT8GTSTFb
- 0MlwuDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDX/ycL+PdDfsZ4QGIz
- 72sBgDCNDoJmkzzjSfLIvN/Q2D0p2XBtKWrc7NkmVzZrzVZ6cLJCBornuJ72
- fOJnmPqpFng=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAhbUQYK6aL9A43CJJoXTpgpEvKny739PCf4pQ
+ pn4hkzJPV+j8+9AOIMPF9Jl4ZWJP1nClEia7/or5/ACeDzs1mIDejf7OXW2o
+ nBV2QQs34VgFTNyD+szaouftcPJK25/2/EwGzn7XCnefd7xiEd1xxtogDHTp
+ VDxcZMuA1/OJ7PYSkYkzRPzwHKUuqqOl2uUPZquOpQgJEYC7lkDePNd8zFvp
+ XmXjaL27EhXyn3tvAjytHOhSU24F0xspK0+Xuv46AIQLztMFO5MItefUQrXF
+ xSUdHR1h558pJf45YRxT9nmiDLdFUt8hLl0aUep7+kkG+7pSytQJT8GTSTFb
+ 0MlwuDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDX/ycL+PdDfsZ4QGIz
+ 72sBgDCNDoJmkzzjSfLIvN/Q2D0p2XBtKWrc7NkmVzZrzVZ6cLJCBornuJ72
+ fOJnmPqpFng=]
profiles::puppet_server::git_pull_token: >
- ENC[PKCS7,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]
+ ENC[PKCS7,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]
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAdehEizEK2eAr85FD4XwS8dzDiIqKV2vanCjn
- yJtnyX3IZ66tJkqtUUUMW5cWDY6I5eMmmmMOdqfXi+ZJ43aXmGNw9T6p05P6
- mVIUG4opuW6Udug1eo9t0QTgtFKquuTJD+bqmvEtXvQ9JR2mKOH24OPi6kp9
- jXbj6Gf9TNbGo9LXFEMuf4PaugOiIyW3rqBqpCX6MI3Fbt5BCkPFgRSl+yxG
- 2fAdNzOz5aDVLptT5fGHCvUPUpTuVGGAToqs4JOVGob1EFfwGniWqYoyzxWq
- 1g8bJ6OJ9w3oXYDm24lqmQB7U7enzrHEnP4wRRiuzXZasoeEjQumLdOmVgZd
- sBBGGjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCixanHeFcVKKQc02XF
- oewVgDB5dfRWbXLWJUcemnGSTPZWFh7Tb7zKl4X9ihJgMsM9NDb2syw4rAfU
- DFxe1xKUOAo=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAdehEizEK2eAr85FD4XwS8dzDiIqKV2vanCjn
+ yJtnyX3IZ66tJkqtUUUMW5cWDY6I5eMmmmMOdqfXi+ZJ43aXmGNw9T6p05P6
+ mVIUG4opuW6Udug1eo9t0QTgtFKquuTJD+bqmvEtXvQ9JR2mKOH24OPi6kp9
+ jXbj6Gf9TNbGo9LXFEMuf4PaugOiIyW3rqBqpCX6MI3Fbt5BCkPFgRSl+yxG
+ 2fAdNzOz5aDVLptT5fGHCvUPUpTuVGGAToqs4JOVGob1EFfwGniWqYoyzxWq
+ 1g8bJ6OJ9w3oXYDm24lqmQB7U7enzrHEnP4wRRiuzXZasoeEjQumLdOmVgZd
+ sBBGGjBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCixanHeFcVKKQc02XF
+ oewVgDB5dfRWbXLWJUcemnGSTPZWFh7Tb7zKl4X9ihJgMsM9NDb2syw4rAfU
+ DFxe1xKUOAo=]
diff --git a/hieradata/nodes/svn.yaml b/hieradata/nodes/svn.yaml
index cf1eae2..e644a10 100644
--- a/hieradata/nodes/svn.yaml
+++ b/hieradata/nodes/svn.yaml
@@ -4,20 +4,35 @@ classes:
profiles::base::admins:
- jandd
- law
-profiles::base::crl_job_enable: true
-profiles::base::crl_job_services:
- - apache2
+profiles::base::crl_job:
+ enable: true
+ hostname: svn.infra.cacert.org
+ services:
+ - apache2
+ check_url: https://monitor.infra.cacert.org:5665/v1/actions/process-check-result
+ api_user: passive-check-submit
+ api_password: >
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBAD
+ AFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAM31x48NC4B2agnpHt0hEzxLLJm
+ ADhYW0Lj3JuBNj+wpK8O4GkAf9L2OlOiNAIgiX5epzbUtvtB8ayQQ2+4yuNn
+ jkgfSDvPaGU+f0mFv0CjynUEDrf2rQzevFyIfnpzN9ZSnGw2/59tpS0LyJ6M
+ Yv3NmB0mdXzPWMrgCMt+G9i/l1s9yVjOw7p7V9prpUqD7hGKG0Fg7EeM7LFJ
+ 1ovxPDDar4ZlhooM6+W3Ov5n0y/3bYaPWv+VhcVmSQvWgJw6ZqP5jhpYTqSC
+ dr8urkIi1wfSSPeiNXhK+SQS/KFZOl9dmhj6QuereRyXX1H7X7fphVltADBq
+ S3mCbxlgEEPPgTbzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDlvyMRCV
+ MAziedXFk/L9XcgDDpzkgF8ybQ+aX31v25dTxzAPEnjuvaGY5njoUEbcpkOo
+ f0mf2So5a6xrylLZCcxrw=]
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAec3jnFxK1YLgov72NUbFza8tlZSAzXnWG/rD
- QEyCaVt9mo9rT1USxkv0MRPmdKjiPx6c+3SXZu4ah1Mgln9TgwOSLy4jKuWX
- NmPo8quPag82wX/WMu4ri1npaLc2Isg8qMCe1N94uYeuN9gGhBclee9iRxpz
- wFhEs7JACkTW1ECDD5VMX/0tZMEvebjbrnEIOy3yqI/JwHSwqERl+y8LzrhH
- w/tn7oeidTBFFe5gnbRaco5LVLFcbeBNe7qmQUtnMFcZ9JAgOxBlCoa1EsLB
- LhJI6+2BqEKe8rH1qbbb2t6OMgmVzc401v48FX5+8zyK0J5QBCTul8HmCQDe
- 5hUJmTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCYhjTXRy19pOxdmsBM
- o9/cgDCuafR60F9NCrba/VThRNOJoJrfk3vwMsBVC+jJcxSqyq6jWidrqvlS
- 3bfPMwDXEkk=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAec3jnFxK1YLgov72NUbFza8tlZSAzXnWG/rD
+ QEyCaVt9mo9rT1USxkv0MRPmdKjiPx6c+3SXZu4ah1Mgln9TgwOSLy4jKuWX
+ NmPo8quPag82wX/WMu4ri1npaLc2Isg8qMCe1N94uYeuN9gGhBclee9iRxpz
+ wFhEs7JACkTW1ECDD5VMX/0tZMEvebjbrnEIOy3yqI/JwHSwqERl+y8LzrhH
+ w/tn7oeidTBFFe5gnbRaco5LVLFcbeBNe7qmQUtnMFcZ9JAgOxBlCoa1EsLB
+ LhJI6+2BqEKe8rH1qbbb2t6OMgmVzc401v48FX5+8zyK0J5QBCTul8HmCQDe
+ 5hUJmTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCYhjTXRy19pOxdmsBM
+ o9/cgDCuafR60F9NCrba/VThRNOJoJrfk3vwMsBVC+jJcxSqyq6jWidrqvlS
+ 3bfPMwDXEkk=]
profiles::x509cert_common::certificates:
'svn.cacert.org':
certificate: |
diff --git a/hieradata/nodes/test3.yaml b/hieradata/nodes/test3.yaml
index 40f9bb6..d553fa8 100644
--- a/hieradata/nodes/test3.yaml
+++ b/hieradata/nodes/test3.yaml
@@ -12,13 +12,13 @@ profiles::base::admins:
- wytze
profiles::base::crl_job_enable: false
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAMKjN59WDnskWcAtQqEliDyQZCqXlz4vLZ4p0
- nDx3yRY0XLObpodx1h9Em3XhETsm85Quh0MujnPrttb6XMh+BKNurc5kLLs6
- QWVNzRyNqm9d+1DLsKjWOnYzwvu1t35v5ZKmsnsmF/3Ek5qmWGlkoiaNajKJ
- 29z1WldM/ZBpXAOv98iPE7iF8hrqpvUOyaJ5mo5aAlLHDT1XW0GQiBPjrMYj
- sR+c7K/3HiuqA4sMsjAhQANI7CFNyvP3sgLE+sp+0PWzCXN6+4jDdUCTI4mp
- 4RL43bMkSBKgLsMxErQW6yenEYpx/gAGWTN16TaC2L3eOlmDs6yMlabLbSg3
- KNPHHDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBfXQRynNrVC5Fg/jv9
- oA/IgDD97FWwTY4zMQXU8krGLmlxJYiL6mCpdSzhfEtWYxj34Ch1Ce0J/HKa
- CW2y+asnB/I=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAMKjN59WDnskWcAtQqEliDyQZCqXlz4vLZ4p0
+ nDx3yRY0XLObpodx1h9Em3XhETsm85Quh0MujnPrttb6XMh+BKNurc5kLLs6
+ QWVNzRyNqm9d+1DLsKjWOnYzwvu1t35v5ZKmsnsmF/3Ek5qmWGlkoiaNajKJ
+ 29z1WldM/ZBpXAOv98iPE7iF8hrqpvUOyaJ5mo5aAlLHDT1XW0GQiBPjrMYj
+ sR+c7K/3HiuqA4sMsjAhQANI7CFNyvP3sgLE+sp+0PWzCXN6+4jDdUCTI4mp
+ 4RL43bMkSBKgLsMxErQW6yenEYpx/gAGWTN16TaC2L3eOlmDs6yMlabLbSg3
+ KNPHHDBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBfXQRynNrVC5Fg/jv9
+ oA/IgDD97FWwTY4zMQXU8krGLmlxJYiL6mCpdSzhfEtWYxj34Ch1Ce0J/HKa
+ CW2y+asnB/I=]
diff --git a/hieradata/nodes/translations.yaml b/hieradata/nodes/translations.yaml
index a4c91c5..10c21ee 100644
--- a/hieradata/nodes/translations.yaml
+++ b/hieradata/nodes/translations.yaml
@@ -5,16 +5,16 @@ profiles::base::admins:
- jandd
- law
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAfQt55rAfM/F5sHxwF2piA0Uz+VK3wfxDfGrq
- B86bLEMxo0L6JCKAJZCbB3g030KCDwHkijGTLdWhFXmmPrtxWxLP0/gSQr2c
- zdINvFYImjree241KUkXIJXxn6pdjGLSbikgJgs9rwIvgGJLxjQZQ7SMhQg2
- Qrwg5ST8tkEqyADYeBMRrvRs53XnD3fs2RKW0hQcfejV5UTVyruVaEtCBsla
- eheWrISyIKWpTF3URj87C7VX1oO4S8eLlI79uD+hBJ1FMQydxEdg44KCfn7C
- 0SPnekHB1DsccEaVMNrabA0NuUaIuO3OacgUGIGY6wIeAQ8XU4fp/80TWg5H
- NWPIWzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAIIDfJz8DZ+wTiUrSQ
- f5zZgDBxARneBbiwCCFM/g2AmmEVOHwFjUATjdCXpURzhVEL+mrFjtakN16r
- 6tihfcnNiqE=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAfQt55rAfM/F5sHxwF2piA0Uz+VK3wfxDfGrq
+ B86bLEMxo0L6JCKAJZCbB3g030KCDwHkijGTLdWhFXmmPrtxWxLP0/gSQr2c
+ zdINvFYImjree241KUkXIJXxn6pdjGLSbikgJgs9rwIvgGJLxjQZQ7SMhQg2
+ Qrwg5ST8tkEqyADYeBMRrvRs53XnD3fs2RKW0hQcfejV5UTVyruVaEtCBsla
+ eheWrISyIKWpTF3URj87C7VX1oO4S8eLlI79uD+hBJ1FMQydxEdg44KCfn7C
+ 0SPnekHB1DsccEaVMNrabA0NuUaIuO3OacgUGIGY6wIeAQ8XU4fp/80TWg5H
+ NWPIWzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAIIDfJz8DZ+wTiUrSQ
+ f5zZgDBxARneBbiwCCFM/g2AmmEVOHwFjUATjdCXpURzhVEL+mrFjtakN16r
+ 6tihfcnNiqE=]
profiles::x509cert_common::certificates:
'translations.cacert.org':
certificate: |
diff --git a/hieradata/nodes/web.yaml b/hieradata/nodes/web.yaml
index 8e79389..0018a68 100644
--- a/hieradata/nodes/web.yaml
+++ b/hieradata/nodes/web.yaml
@@ -5,16 +5,16 @@ profiles::base::admins:
- jandd
- law
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAMqkR/DWeLFAWqlr3jgDHss1geIoCQ3uyvLYN
- 8ZIGs2H9GBOt5hLtauxpG5U8oWwg/G4blCEFHAHt7XUrGHW57hLc18uA5pz0
- rxRoKvrHVWBevsjvGK4lvmI3lfhY4EShqFT80O9u0Pn2XxyM0vmlDhpHuNb7
- dqCp2d9hHnvM+/5rqIlYqMPfWQbmO1bYnE+x1pbHiZg+qzeT0klYJUbL+fUz
- ZiDuJi0yDbqsX1pAB4NdQVD864IjvENg7TNxBY2Cqoa3XjnayBANOT5HdXKw
- yjf8+UvfpbXEc5QohyBMQDfzxZ8MgAbjRWd4+AmIIy+tbrdqQMMyhZ9ILAlM
- HJyrfzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDB9xfyP2Mjapd/vzRW
- ek3UgDBo03zKwbxJ6uooqQ/68zHDKAj0gh2Kpe8tGdbnKm1dOHIpru/5zjob
- 2gNuQB6szY0=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAMqkR/DWeLFAWqlr3jgDHss1geIoCQ3uyvLYN
+ 8ZIGs2H9GBOt5hLtauxpG5U8oWwg/G4blCEFHAHt7XUrGHW57hLc18uA5pz0
+ rxRoKvrHVWBevsjvGK4lvmI3lfhY4EShqFT80O9u0Pn2XxyM0vmlDhpHuNb7
+ dqCp2d9hHnvM+/5rqIlYqMPfWQbmO1bYnE+x1pbHiZg+qzeT0klYJUbL+fUz
+ ZiDuJi0yDbqsX1pAB4NdQVD864IjvENg7TNxBY2Cqoa3XjnayBANOT5HdXKw
+ yjf8+UvfpbXEc5QohyBMQDfzxZ8MgAbjRWd4+AmIIy+tbrdqQMMyhZ9ILAlM
+ HJyrfzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDB9xfyP2Mjapd/vzRW
+ ek3UgDBo03zKwbxJ6uooqQ/68zHDKAj0gh2Kpe8tGdbnKm1dOHIpru/5zjob
+ 2gNuQB6szY0=]
profiles::web_proxy::ssl_certificates:
'web.cacert.org':
key: >
@@ -673,8 +673,7 @@ profiles::web_proxy::apache_vhosts:
ssl_chain: "/usr/local/share/ca-certificates/cacert_class3_2021.crt"
ssl_key: "/etc/ssl/private/codedocs.cacert.org.key"
proxy_pass:
- -
- path: /
+ - path: /
url: http://10.0.0.116:80/
proxy_preserve_host: true
'funding.cacert.org redirect-http':
@@ -704,8 +703,7 @@ profiles::web_proxy::apache_vhosts:
ssl_chain: "/usr/local/share/ca-certificates/cacert_class3_2021.crt"
ssl_key: "/etc/ssl/private/funding.cacert.org.key"
proxy_pass:
- -
- path: /
+ - path: /
url: http://10.0.0.116:80/
proxy_preserve_host: true
'infradocs.cacert.org redirect-http':
@@ -732,11 +730,10 @@ profiles::web_proxy::apache_vhosts:
manage_docroot: false
ssl: true
ssl_cert: "/etc/ssl/certs/infradocs.cacert.org.crt"
- ssl_chain: "/usr/share/ca-certificates/CAcert/class3_X0E.crt"
+ ssl_chain: "/usr/local/share/ca-certificates/cacert_class3_2021.crt"
ssl_key: "/etc/ssl/private/infradocs.cacert.org.key"
proxy_pass:
- -
- path: /
+ - path: /
url: http://10.0.0.116:80/
proxy_preserve_host: true
'jenkins.cacert.org redirect-http':
@@ -763,11 +760,10 @@ profiles::web_proxy::apache_vhosts:
manage_docroot: false
ssl: true
ssl_cert: "/etc/ssl/certs/jenkins.cacert.org.crt"
- ssl_chain: "/usr/share/ca-certificates/CAcert/class3_X0E.crt"
+ ssl_chain: "/usr/local/share/ca-certificates/cacert_class3_2021.crt"
ssl_key: "/etc/ssl/private/jenkins.cacert.org.key"
proxy_pass:
- -
- path: /
+ - path: /
url: http://10.0.0.115:8080/
keywords: ['nocanon']
proxy_preserve_host: true
diff --git a/hieradata/nodes/webstatic.yaml b/hieradata/nodes/webstatic.yaml
index 497cab4..27223ba 100644
--- a/hieradata/nodes/webstatic.yaml
+++ b/hieradata/nodes/webstatic.yaml
@@ -6,72 +6,72 @@ profiles::base::admins:
- law
profiles::debarchive::notification_email_address: jandd@cacert.org
profiles::debarchive::release_signing_key: >
- ENC[PKCS7,MIIIzQYJKoZIhvcNAQcDoIIIvjCCCLoCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAtJiS4GluyFbbkmxFKmH+2CWZRD1wotHn8HAc
- 7wXckaUSIaUvHY9aor6lxFgjD8vnE5ROmiBTtCsJ0Rmx0oJMO7XDTTKfauwZ
- sTNIi/xPq4YX3fGAKZQ0HpDZQRsgFuh+6acW3B59KAWZlcJCQqnSO/OUdCNz
- yHSdFF1hMM7fTHYfMXkvp91oOkxkSHhAtiC2AbB82AaSikt7rNv/03rL6Hv7
- 8vzfjo14m0UGMGGo5Yn8N38Yn24WQTJOGhgBeUm1GpLylaqUDNWN8kRVWrqF
- 0/O+FTjtGQjeQVkR73u2Iy9n+cvX3blYZKl1ItRRWgFjf/pP6uV4P7d8IrSG
- 1myvMzCCB44GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEJeo9l7ZAFDCx2IS
- K4F1IoqAggdgIZWj1bAB165e6eZ0MDx60xsurDWPOFqMlVNmVhrM7O5+n/pB
- IGBJ+ylUsi97gaWrIAAyzYqnfbqN8pjwNA55gqw6jx2H8AsRuMUDU76JBUtu
- WvxiMgYOmf4V0tt6i5uLxDIEzkfIf4Mh4sSVoZW/wR2A0n5L4YcbJTHRW9D0
- idNVfV2hKFxqX9QpbwoJk4IlW68hidk9mpKKO81bA6rO+IF0OoYg1vTBu26M
- ZdFChv9Ypm10jR2vqhbbb15btOyi5pa/wcis8GYBEvANnQgUfGS//YHK9ttd
- 1x3JQ6YL87Ye5iXUzOoohHIZ+QHalfyMHPotOy8fsnQyxZd3pkA6utLMItr6
- 3ehPtsT71a17nC30TJFKgopGigccvk24K5kZozZdG2qyy7yycn1JHp53TirK
- kdLDfAbwPnhV2+gUycz+51eGvBE3ZdafV+20Wx6hUd6S+F3zef/aeD9D7u9c
- soIDj1Lun7f7CBE0qgbvlg0vUHFlpGvtTFK2eoJVAid3odefj9x06yoi23RU
- Y8MddhqxvZGtZituqPvfpDqOY3cTu4WJc/VznKcEkOlWU4R4gqw6NWrt1J6l
- 1/PqJCqLlvkebbd9R8jZGuy6PgKCsg4oDRjcKpsxbydO9NJwMgUd6UQI4HeZ
- vbcpbBOwGcXizE+myTjUbS3UbtZAMGWiBPDa+pkNSet4R8MdkcFnaS0vwa8N
- Uot7eqpDUpKvgeJz/Vk0WhUfPkyiaT3idy1i0GDFZD9eV9v3tpyp9xBQMK42
- VZEep2p0mXopUk61xY9tpuZQvw53//Bqq3YXfZghhXlgdeLIcxpp7af5lBAU
- iavhoMs5fZwEsSxfkUXVT4w7A4b02X9FeDdQ1TY3orI1yTLKzmx/FgozztTy
- CYh1/o6K9r1Mo1INWpngy/kLCaZtySppzTzaDBIoCbDWJjWE5FzMlslaBVqk
- PjTemUHuyXsWoRFnik0JW4AMuRYqcsf8KsrI/lDiGgNDR9BxNRrmHplclhvA
- 8zAccSQLH53NKh4ma5WPVmbl++6gB6OSeHlwttQDaNBuujoMADF8MWiJNXjj
- qfqpKHxlEQEqG/CrTJoWJ+EROl5daH6+TVXTXGzUSIsqOir91Jo4Sd4fJYsh
- CpjHy+jyQZiXuYWWOWXV7suBw399Twozm4sKBcefumXMkgiJnSnibGtSV7ia
- Ob84hEoQH+Hg/md6rJYefIZYyCOi8IyEV8n4mUr4/DOD0s+BmPxPOgYCDhc8
- o8IyiUajFCR64gVWou8xnR4OG0ged+1zaU75pq04U5kPARg/WfFWHYWo9Ljq
- v81+VsWSPEb3ILsX3ZCLT/axkSE3VYEAOaRoT1mE8cc4ENjVRzd50y4I2V4A
- rALARll+gSSdE/cXqFI4DrkwkobCATYlYNpvBACASkpQVzJontdmJ5sIjEPE
- LVbAhOHIL4mNNI24zLABOzwS6RGi0sJjfZIjnc7qsb5cxU2PtwkLleHbbcgM
- tVcmX3EFg+rMg9wGYLT+l4K91pjWmBRN8lssEYNoOcrPu5gvvQDBpWHc3Y+b
- Oa5x5bT1IjSKgkCWpducMq3u6zvHQnlS5hDgPTfCZPYmQdM5FVCOcJ0TYoZ8
- +taq1nV2vsX25dtUzxkUcYkRlnXOZx80j53tkJwqFPr2GrN+6I9brL3KYIwp
- itRzGROLovhX6tSsawPI0bLwAG/5c2OoPPbs6jSP0K+JSTxmalLw4TDUKAl+
- QfZNzMEH98lw6HGq7aG9njtggw6G4odBrY1ud0KN7/GlF2kjAUyJVJEMiIfj
- 0Lq968XdYiNDOwpre8mn5xqJCtt0sZjy9zWZ9xoyUYDoIeAOCrdS9VgaOilP
- IG9w/uszbRBWXxiSU76oTgKHAJMFZttWAkBHX5NEcCGksKUbS1Frh76/Kj2G
- kSL6tDJRsAqEPibtrKCWU9DNGNjwOndlLZveSqNWTK4yWVrLozff0qdV+ZBn
- VvKW280MpQNFMwhnuxj+WA9tcwg4ajUWFP/8WhpQMc+5aDuvQSTvWUo5YXgk
- I/5Gcb7Y05CodZ1eJEtyh8r+Z01LmBW1l6a15PeUIBPLs1xg6mqdSenFnB/D
- q2UnFnd/aoeh49VLpEWRhdK9Yl3Jyz+0tHNDnD0uQ/Zlox49KYx3YQv4gpMq
- CcC1tw9Lfcc/UY23yhG3MJ5dRJIeP+FWBTfqeN+lq+dnu7ua/4CKVzjiaeU4
- ygAo2m4Myono4lSpN4VgyUfGzrMpOXOyOa40mgBBgrxDNmAgyIk2obU7h26U
- ZcZKSgk/W97dSORGPYQcLNZBiRCV+hHV3I8IGdGcz+MZugluNH28znhpUnp0
- aTkO/6mPnojAA/5ERXrdBEyTuOR662BfVMAkIVCfVPe5W6P34popQQwNRRjL
- 7qKVOpRKA15H3QDHEsh/SOc59L9tvzCa637rBGJMBfvf8QyrUwOVnVebgFSm
- r9bg7DReCgweHUukIbHzVPy3UE/lyqnAZWeIPJ4+jmTqrATq/EOs9iQQetyR
- VP8xiy7PwA==]
+ ENC[PKCS7,MIIIzQYJKoZIhvcNAQcDoIIIvjCCCLoCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAtJiS4GluyFbbkmxFKmH+2CWZRD1wotHn8HAc
+ 7wXckaUSIaUvHY9aor6lxFgjD8vnE5ROmiBTtCsJ0Rmx0oJMO7XDTTKfauwZ
+ sTNIi/xPq4YX3fGAKZQ0HpDZQRsgFuh+6acW3B59KAWZlcJCQqnSO/OUdCNz
+ yHSdFF1hMM7fTHYfMXkvp91oOkxkSHhAtiC2AbB82AaSikt7rNv/03rL6Hv7
+ 8vzfjo14m0UGMGGo5Yn8N38Yn24WQTJOGhgBeUm1GpLylaqUDNWN8kRVWrqF
+ 0/O+FTjtGQjeQVkR73u2Iy9n+cvX3blYZKl1ItRRWgFjf/pP6uV4P7d8IrSG
+ 1myvMzCCB44GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEJeo9l7ZAFDCx2IS
+ K4F1IoqAggdgIZWj1bAB165e6eZ0MDx60xsurDWPOFqMlVNmVhrM7O5+n/pB
+ IGBJ+ylUsi97gaWrIAAyzYqnfbqN8pjwNA55gqw6jx2H8AsRuMUDU76JBUtu
+ WvxiMgYOmf4V0tt6i5uLxDIEzkfIf4Mh4sSVoZW/wR2A0n5L4YcbJTHRW9D0
+ idNVfV2hKFxqX9QpbwoJk4IlW68hidk9mpKKO81bA6rO+IF0OoYg1vTBu26M
+ ZdFChv9Ypm10jR2vqhbbb15btOyi5pa/wcis8GYBEvANnQgUfGS//YHK9ttd
+ 1x3JQ6YL87Ye5iXUzOoohHIZ+QHalfyMHPotOy8fsnQyxZd3pkA6utLMItr6
+ 3ehPtsT71a17nC30TJFKgopGigccvk24K5kZozZdG2qyy7yycn1JHp53TirK
+ kdLDfAbwPnhV2+gUycz+51eGvBE3ZdafV+20Wx6hUd6S+F3zef/aeD9D7u9c
+ soIDj1Lun7f7CBE0qgbvlg0vUHFlpGvtTFK2eoJVAid3odefj9x06yoi23RU
+ Y8MddhqxvZGtZituqPvfpDqOY3cTu4WJc/VznKcEkOlWU4R4gqw6NWrt1J6l
+ 1/PqJCqLlvkebbd9R8jZGuy6PgKCsg4oDRjcKpsxbydO9NJwMgUd6UQI4HeZ
+ vbcpbBOwGcXizE+myTjUbS3UbtZAMGWiBPDa+pkNSet4R8MdkcFnaS0vwa8N
+ Uot7eqpDUpKvgeJz/Vk0WhUfPkyiaT3idy1i0GDFZD9eV9v3tpyp9xBQMK42
+ VZEep2p0mXopUk61xY9tpuZQvw53//Bqq3YXfZghhXlgdeLIcxpp7af5lBAU
+ iavhoMs5fZwEsSxfkUXVT4w7A4b02X9FeDdQ1TY3orI1yTLKzmx/FgozztTy
+ CYh1/o6K9r1Mo1INWpngy/kLCaZtySppzTzaDBIoCbDWJjWE5FzMlslaBVqk
+ PjTemUHuyXsWoRFnik0JW4AMuRYqcsf8KsrI/lDiGgNDR9BxNRrmHplclhvA
+ 8zAccSQLH53NKh4ma5WPVmbl++6gB6OSeHlwttQDaNBuujoMADF8MWiJNXjj
+ qfqpKHxlEQEqG/CrTJoWJ+EROl5daH6+TVXTXGzUSIsqOir91Jo4Sd4fJYsh
+ CpjHy+jyQZiXuYWWOWXV7suBw399Twozm4sKBcefumXMkgiJnSnibGtSV7ia
+ Ob84hEoQH+Hg/md6rJYefIZYyCOi8IyEV8n4mUr4/DOD0s+BmPxPOgYCDhc8
+ o8IyiUajFCR64gVWou8xnR4OG0ged+1zaU75pq04U5kPARg/WfFWHYWo9Ljq
+ v81+VsWSPEb3ILsX3ZCLT/axkSE3VYEAOaRoT1mE8cc4ENjVRzd50y4I2V4A
+ rALARll+gSSdE/cXqFI4DrkwkobCATYlYNpvBACASkpQVzJontdmJ5sIjEPE
+ LVbAhOHIL4mNNI24zLABOzwS6RGi0sJjfZIjnc7qsb5cxU2PtwkLleHbbcgM
+ tVcmX3EFg+rMg9wGYLT+l4K91pjWmBRN8lssEYNoOcrPu5gvvQDBpWHc3Y+b
+ Oa5x5bT1IjSKgkCWpducMq3u6zvHQnlS5hDgPTfCZPYmQdM5FVCOcJ0TYoZ8
+ +taq1nV2vsX25dtUzxkUcYkRlnXOZx80j53tkJwqFPr2GrN+6I9brL3KYIwp
+ itRzGROLovhX6tSsawPI0bLwAG/5c2OoPPbs6jSP0K+JSTxmalLw4TDUKAl+
+ QfZNzMEH98lw6HGq7aG9njtggw6G4odBrY1ud0KN7/GlF2kjAUyJVJEMiIfj
+ 0Lq968XdYiNDOwpre8mn5xqJCtt0sZjy9zWZ9xoyUYDoIeAOCrdS9VgaOilP
+ IG9w/uszbRBWXxiSU76oTgKHAJMFZttWAkBHX5NEcCGksKUbS1Frh76/Kj2G
+ kSL6tDJRsAqEPibtrKCWU9DNGNjwOndlLZveSqNWTK4yWVrLozff0qdV+ZBn
+ VvKW280MpQNFMwhnuxj+WA9tcwg4ajUWFP/8WhpQMc+5aDuvQSTvWUo5YXgk
+ I/5Gcb7Y05CodZ1eJEtyh8r+Z01LmBW1l6a15PeUIBPLs1xg6mqdSenFnB/D
+ q2UnFnd/aoeh49VLpEWRhdK9Yl3Jyz+0tHNDnD0uQ/Zlox49KYx3YQv4gpMq
+ CcC1tw9Lfcc/UY23yhG3MJ5dRJIeP+FWBTfqeN+lq+dnu7ua/4CKVzjiaeU4
+ ygAo2m4Myono4lSpN4VgyUfGzrMpOXOyOa40mgBBgrxDNmAgyIk2obU7h26U
+ ZcZKSgk/W97dSORGPYQcLNZBiRCV+hHV3I8IGdGcz+MZugluNH28znhpUnp0
+ aTkO/6mPnojAA/5ERXrdBEyTuOR662BfVMAkIVCfVPe5W6P34popQQwNRRjL
+ 7qKVOpRKA15H3QDHEsh/SOc59L9tvzCa637rBGJMBfvf8QyrUwOVnVebgFSm
+ r9bg7DReCgweHUukIbHzVPy3UE/lyqnAZWeIPJ4+jmTqrATq/EOs9iQQetyR
+ VP8xiy7PwA==]
profiles::debarchive::release_signing_keygrip: 223894064EE26851A245DE9208C5C0ABF772F7A7
profiles::debarchive::release_signing_keyid: "CAcert Debian Archive Signing Key 2019"
profiles::debarchive::uploaders:
- jandd
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEApecW/rPl4fMSAHNJSzDl5RX8y0JJSVqPj+S6
- g7vxVMMnAOFR+Ex7BvRCNZ5/HISEuijPxPZlvDpaKYA3V8Z0/aHq8KKzOy56
- wA9JSyIXzHv1hQmwLB2R5J2SZnKiAza9g0tJ9nM3q3YwfkofSUrYzPKHUZfm
- LzjRCVFYDttlP2M9LedAb3+UE2UAkN0tZ2s/LplxnhBpXH89pqcPBzTmAQqe
- bXR2kskXDku/f41+nY8Yv3vEyLGd/uiQR6oer/cPIj7RUI26PTdd+3LlTb0f
- W8sqbf8IAo2EpneRL0Pg1kYYd1IV/0I9K8K+93xTsqR52yQdtgo6sUxsWczB
- zWIAoTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCz2/HN15HQ/xCGQExX
- Ozd9gDCOqJLm9jtlSoCpwDwzowwiCgRj+k1s444lp1RkvgWKCrfO3QkOF3aR
- MY7nsz39ve8=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEApecW/rPl4fMSAHNJSzDl5RX8y0JJSVqPj+S6
+ g7vxVMMnAOFR+Ex7BvRCNZ5/HISEuijPxPZlvDpaKYA3V8Z0/aHq8KKzOy56
+ wA9JSyIXzHv1hQmwLB2R5J2SZnKiAza9g0tJ9nM3q3YwfkofSUrYzPKHUZfm
+ LzjRCVFYDttlP2M9LedAb3+UE2UAkN0tZ2s/LplxnhBpXH89pqcPBzTmAQqe
+ bXR2kskXDku/f41+nY8Yv3vEyLGd/uiQR6oer/cPIj7RUI26PTdd+3LlTb0f
+ W8sqbf8IAo2EpneRL0Pg1kYYd1IV/0I9K8K+93xTsqR52yQdtgo6sUxsWczB
+ zWIAoTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCz2/HN15HQ/xCGQExX
+ Ozd9gDCOqJLm9jtlSoCpwDwzowwiCgRj+k1s444lp1RkvgWKCrfO3QkOF3aR
+ MY7nsz39ve8=]
profiles::static_websites::apache_vhosts:
'webstatic.cacert.org':
port: 80
@@ -97,8 +97,7 @@ profiles::static_websites::apache_vhosts:
directoryindex:
- "index.html"
directories:
- -
- path: "/var/www/funding.cacert.org"
+ - path: "/var/www/funding.cacert.org"
options:
- "-Includes"
- "-Indexes"
@@ -127,8 +126,7 @@ profiles::static_websites::apache_vhosts:
directoryindex:
- "index.html"
directories:
- -
- path: "/var/www/codedocs.cacert.org/html"
+ - path: "/var/www/codedocs.cacert.org/html"
options:
- "-Includes"
- "-Indexes"
@@ -155,8 +153,7 @@ profiles::static_websites::apache_vhosts:
directoryindex:
- "index.html"
directories:
- -
- path: "/var/www/community.cacert.org"
+ - path: "/var/www/community.cacert.org"
options:
- "-Includes"
- "-Indexes"
@@ -185,8 +182,7 @@ profiles::static_websites::apache_vhosts:
directoryindex:
- "index.html"
directories:
- -
- path: "/var/www/infradocs.cacert.org/html"
+ - path: "/var/www/infradocs.cacert.org/html"
options:
- "-Includes"
- "-Indexes"
diff --git a/hieradata/nodes/wiki.yaml b/hieradata/nodes/wiki.yaml
index f97df73..506a5a1 100644
--- a/hieradata/nodes/wiki.yaml
+++ b/hieradata/nodes/wiki.yaml
@@ -6,16 +6,16 @@ profiles::base::admins:
- jandd
- law
profiles::icinga2_agent::pki_ticket: >
- ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
- DQYJKoZIhvcNAQEBBQAEggEAjOSvvtlZs+Gv7OB6ULHAWRs51L65afl3k0KJ
- L3m7c7Oh/N1aFC7ni0EOJym/n3E/WpmM7JsM4SJu5XrBe7sIOLecGeqtpFWb
- VXDYVqEXJ4ciZNHB/R2Mnumha497iC9BVD32ZfK1KU+aha8PCb8t1lRHyekD
- tnMOR7dIaKJf6NMvpBUwQqyJ0ly1c+588eFfJxC2XX0xOp/UWlK98DNBZYLj
- ax2Grcb7lYa9FywseTUBOe3NQsUJrneyTLluKo8ANGqIDunRN2KtA0ai6/gN
- wc9BWBJKrSUFI3iKSvf6ar5N3Hpdk8lHbMeK/XfcLxIXcQUVlu3Y5XhVf/aG
- CENzHTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCxh2btktTQOw/SivS6
- H9/SgDAg/43TaVhYJ48kzhuxpSRinR6RqwAWqQy4RmEOlvLKaxDbG8h5B3ap
- CPwQco1Eyew=]
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAjOSvvtlZs+Gv7OB6ULHAWRs51L65afl3k0KJ
+ L3m7c7Oh/N1aFC7ni0EOJym/n3E/WpmM7JsM4SJu5XrBe7sIOLecGeqtpFWb
+ VXDYVqEXJ4ciZNHB/R2Mnumha497iC9BVD32ZfK1KU+aha8PCb8t1lRHyekD
+ tnMOR7dIaKJf6NMvpBUwQqyJ0ly1c+588eFfJxC2XX0xOp/UWlK98DNBZYLj
+ ax2Grcb7lYa9FywseTUBOe3NQsUJrneyTLluKo8ANGqIDunRN2KtA0ai6/gN
+ wc9BWBJKrSUFI3iKSvf6ar5N3Hpdk8lHbMeK/XfcLxIXcQUVlu3Y5XhVf/aG
+ CENzHTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCxh2btktTQOw/SivS6
+ H9/SgDAg/43TaVhYJ48kzhuxpSRinR6RqwAWqQy4RmEOlvLKaxDbG8h5B3ap
+ CPwQco1Eyew=]
profiles::x509cert_common::certificates:
'wiki.cacert.org':
certificate: |
diff --git a/sitemodules/profiles/files/icinga2_master/check_puppetdb_nodes b/sitemodules/profiles/files/icinga2_master/check_puppetdb_nodes
index 727a328..1145e4e 100644
--- a/sitemodules/profiles/files/icinga2_master/check_puppetdb_nodes
+++ b/sitemodules/profiles/files/icinga2_master/check_puppetdb_nodes
@@ -1,253 +1,277 @@
-#!/usr/bin/perl
-
-# Copyright (c) 2014, Evgeni Golov
-# All rights reserved.
-#
-# Redistribution and use in source and binary forms, with or without modification,
-# are permitted provided that the following conditions are met:
-#
-# * Redistributions of source code must retain the above copyright notice, this
-# list of conditions and the following disclaimer.
-#
-# * Redistributions in binary form must reproduce the above copyright notice, this
-# list of conditions and the following disclaimer in the documentation and/or
-# other materials provided with the distribution.
-#
-# * Neither the name of the {organization} nor the names of its
-# contributors may be used to endorse or promote products derived from
-# this software without specific prior written permission.
-#
-# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
-# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
-# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
-# DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
-# ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
-# (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
-# LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
-# ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
-# SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-use strict;
-use warnings;
-use JSON;
-use LWP;
-use Monitoring::Plugin;
-use Date::Parse;
-
-my $np = Monitoring::Plugin->new(
- usage => "Usage: %s [ -H|--hostname=<hostname>] "
- . "[ -p|--port=<port> ] [-s] [ -w|--warning=<minutes> ] "
- . "[ -c|--critical=<minutes> ] [ -W|--warnfails=<num> ] "
- . "[ -C|--critfails=<num> ] [ -n|--node=<node> ]"
- . "[ -a|--apiversion=<num> ]"
- . "[ -i|--ignore=<list> ]",
- shortname => 'Check last node runs from PuppetDB',
- url => 'https://github.com/evgeni/check_puppetdb_nodes',
- version => '1.0',
- license => 'This plugin is free software, and comes with ABSOLUTELY
-NO WARRANTY. It may be used, redistributed and/or modified under
-the terms of the BSD 3-clause license.',
-);
-
-$np->add_arg(
- spec => 'warning|w=i',
- help => "Exit with WARNING status if nodes did not update for "
- . "more than INTEGER minutes (default: %s)",
- default => 120,
-);
-
-$np->add_arg(
- spec => 'critical|c=i',
- help => "Exit with CRITICAL status if nodes did not update for "
- . "more than INTEGER minutes (default: %s)",
- default => 1440,
-);
-
-$np->add_arg(
- spec => 'warnfails|W=i',
- help => "Exit with WARNING status if nodes had at least INTEGER "
- . "failures in the last run (default: %s)",
- default => 1,
-);
-
-$np->add_arg(
- spec => 'critfails|C=i',
- help => "Exit with CRITICAL status if nodes had at least INTEGER "
- . "failures in the last run (default: %s)",
- default => 1,
-);
-
-$np->add_arg(
- spec => 'hostname|H=s',
- help => 'Hostname of the PuppetDB (default: %s)',
- default => 'localhost',
-);
-
-$np->add_arg(
- spec => 'port|p=i',
- help => 'Port PuppetDB is running on (default: %s)',
- default => 8080,
-);
-
-$np->add_arg(
- spec => 'node|n=s',
- help => 'Node name to check, if not given, all nodes will be checked',
-);
-
-$np->add_arg(
- spec => 'ssl|s',
- help => "Use HTTPS instead of HTTP",
-);
-
-$np->add_arg(
- spec => 'insecure|k',
- help => "Allow connections via HTTPS without checking certificates",
-);
-
-$np->add_arg(
- spec => 'apiversion|a=n',
- help => 'Specify PupppetDB API version (default: %s)',
- default => 3,
-);
-
-$np->add_arg(
- spec => 'ignore|i=s',
- help => 'Node names to ignore (comma-separated list) (default: %s)',
- default => '',
-);
-
-$np->getopts;
-
-my %apiurls = (
- 3 => { 'nodes' => 'v3/nodes', 'event-counts' => 'v3/event-counts' },
- 4 => { 'nodes' => 'pdb/query/v4/nodes', 'event-counts' => 'pdb/query/v4/event-counts', 'logs' => 'pdb/query/v4/reports/{hash}/logs' },
-);
-if ( !exists $apiurls{$np->opts->apiversion} ) {
- $np->nagios_exit( 'UNKNOWN', 'Unsupported PuppetDB API version ' . $np->opts->apiversion );
+#!/usr/bin/env python3
+"""Nagios/Icinga plugin to check puppetdb status of a node."""
+
+import argparse
+import logging
+from datetime import datetime
+from urllib.parse import urljoin
+
+import nagiosplugin
+import requests
+
+_log = logging.getLogger("check_puppetdb_nodes")
+
+api_urls = {
+ 3: {"nodes": "v3/nodes", "event-counts": "v3/event-counts"},
+ 4: {
+ "nodes": "pdb/query/v4/nodes",
+ "event-counts": "pdb/query/v4/event-counts",
+ "logs": "pdb/query/v4/reports/{hash}/logs",
+ },
}
-my @ignore_list = split( ',', $np->opts->ignore );
-my $url = sprintf( 'http%s://%s:%d/',
- defined( $np->opts->ssl ) ? 's' : '',
- $np->opts->hostname, $np->opts->port );
+class BoolContext(nagiosplugin.Context):
+ def evaluate(self, metric, resource):
+ if metric != 0:
+ return self.result_cls(nagiosplugin.Critical, metric)
-my $ua = new LWP::UserAgent;
-$ua->default_header( 'Accept' => 'application/json' );
-if ( defined( $np->opts->insecure ) ) {
- $ua->ssl_opts( verify_hostname => 0 ,SSL_verify_mode => 0x00);
-}
-my %parameters = ();
-if ( defined( $np->opts->node ) ) {
- %parameters = ( 'query' => '["=","certname","' . $np->opts->node . '"]' );
-}
-my $uri = URI->new( $url . $apiurls{$np->opts->apiversion}{'nodes'} );
-$uri->query_form(%parameters);
-my $response = $ua->get($uri);
+class PuppetDBReport(nagiosplugin.Resource):
+ """Domain model: last report for node.
-if ( !$response->is_success ) {
- $np->nagios_exit( 'UNKNOWN',
- $response->code . ": " . $response->status_line );
-}
+ Determines the age of the last puppetdb report for the given node.
+ """
-my $data = decode_json( $response->decoded_content );
+ def __init__(self, api_client, node_name, ignored):
+ self.api_client = api_client
+ self.node_name = node_name
+ self.ignored = ignored or []
-my $now = time();
+ def probe(self):
+ node_info = self.api_client.fetch_node_information(self.node_name)
-if ( defined( $np->opts->node ) and !@$data ) {
- $np->add_message( CRITICAL,
- $np->opts->node . " not found in puppetdb\n" );
-}
+ for node in node_info:
+ if "certname" in node:
+ certname = node["certname"]
+ else:
+ certname = node["name"]
+ deactivated = node["deactivated"]
+ catalog_timestamp = node["catalog_timestamp"]
+ report_hash = node["latest_report_hash"]
+ ts = datetime.strptime(catalog_timestamp, "%Y-%m-%dT%H:%M:%S.%fZ")
+ delta = datetime.utcnow() - ts
-foreach my $node (@$data) {
- my $certname = defined($node->{'certname'}) ? $node->{'certname'} : $node->{'name'} ;
- my $deactivated = $node->{'deactivated'};
- my $catalog_timestamp = $node->{'catalog_timestamp'};
- my $report_hash = $node->{'latest_report_hash'};
- my $ts = str2time($catalog_timestamp);
-
- next if grep { $certname eq $_ } @ignore_list;
-
- if ( !defined $deactivated and ( !length $catalog_timestamp or !length $report_hash )) {
- $np->add_message( CRITICAL,
- "$certname last run UNAVAILABLE\n" );
- }
- if ( !defined $deactivated and length $catalog_timestamp and $report_hash) {
- my $delta = ( $now - $ts );
- if ( $delta > ( $np->opts->critical * 60 ) ) {
- $np->add_message( CRITICAL,
- "$certname did not update since $catalog_timestamp\n" );
- }
- elsif ( $delta > ( $np->opts->warning * 60 ) ) {
- $np->add_message( WARNING,
- "$certname did not update since $catalog_timestamp\n" );
- }
-
- my %apiparameters = (
- 3 => {
- 'query' => '["and",["=","certname","'
- . $certname
- . '"],["=","latest-report?",true]]',
- 'summarize-by' => 'certname',
- 'count-by' => 'resource',
- },
- 4 => {
- 'query' => '["and",["=","certname","'
- . $certname
- . '"],["=","latest_report?",true]]',
- 'summarize_by' => 'certname',
- 'count_by' => 'resource',
- }
- );
- my $uri = URI->new( $url . $apiurls{$np->opts->apiversion}{'event-counts'} );
- $uri->query_form($apiparameters{$np->opts->apiversion});
- $response = $ua->get($uri);
-
- if ( $response->is_success ) {
- my $node_data = decode_json( $response->decoded_content );
-
- my $failures = 0;
- if ( defined( @$node_data[0] )
- and defined( @$node_data[0]->{'failures'} ) )
- {
- $failures = @$node_data[0]->{'failures'};
- }
+ if deactivated:
+ yield nagiosplugin.Metric(f"missing-{certname}", 1, min=0)
+ continue
- if ( $failures >= $np->opts->critfails ) {
- $np->add_message( CRITICAL,
- "$certname had $failures failures in the last run\n" );
- }
- elsif ( $failures >= $np->opts->warnfails ) {
- $np->add_message( WARNING,
- "$certname had $failures failures in the last run\n" );
- }
- elsif ( exists $apiurls{$np->opts->apiversion}{'logs'} ) {
- my $apiurl = $apiurls{$np->opts->apiversion}{'logs'};
- $apiurl =~ s/{hash}/$report_hash/;
- $uri = URI->new( $url . $apiurl );
- $response = $ua->get($uri);
- if ( $response->is_success ) {
- my $logs = decode_json( $response->decoded_content );
- foreach my $log (@$logs) {
- my $tags = $log->{'tags'};
- if ( grep(/^err$/, @$tags) ) {
- $np->add_message( WARNING, "$certname, $log->{'message'}" );
- }
- }
- }
- }
+ if certname in self.ignored:
+ continue
- } else {
- $np->nagios_exit( 'UNKNOWN', 'Unsupported query ' . $response->decoded_content);
- }
+ yield nagiosplugin.Metric(
+ f"last-{certname}", round(delta.total_seconds()), "s", min=0
+ )
- }
-}
+ failures = self.api_client.fetch_failure_report(certname, report_hash)
+ yield nagiosplugin.Metric(f"failed-{certname}", failures, min=0)
+
+
+def comma_separated(string):
+ result = []
+ for part in [item.trim for item in string.split(",")]:
+ if len(part) > 0:
+ result.append(part)
+ return result
-my $code;
-my $message;
-( $code, $message ) = $np->check_messages;
-$np->nagios_exit( $code, $message );
+class PuppetDBClient:
+ def __init__(self, hostname, port, tls, insecure, roots, api_version):
+ scheme = tls and "https" or "http"
+ self.base_url = f"{scheme}://{hostname}:{port}/"
+ self.allow_insecure = insecure
+ self.use_roots = roots
+ self.api_version = api_version
+
+ self.client = requests.Session()
+ self.client.headers = {"Accept": "application/json"}
+ self.node_info = []
+
+ def fetch_node_information(self, node_name):
+ if self.node_info:
+ return self.node_info
+
+ url = urljoin(self.base_url, api_urls[self.api_version]["nodes"])
+ if node_name:
+ r = self.client.get(
+ url, params={"query": f'["=","certname","{node_name}"]'}
+ )
+ else:
+ r = self.client.get(url)
+
+ r.raise_for_status()
+
+ self.node_info = r.json()
+
+ return self.node_info
+
+ def fetch_failure_report(self, cert_name, report_hash):
+ url = urljoin(self.base_url, api_urls[self.api_version]["event-counts"])
+
+ if self.api_version == 3:
+ query_args = {
+ "query": f'["and",["=","certname","{cert_name}"],["=","latest-report?",true]]',
+ "summarize-by": "certname",
+ "count-by": "resource",
+ }
+ else:
+ query_args = {
+ "query": f'["and",["=","certname","{cert_name}"],["=","latest_report?",true]]',
+ "summarize_by": "certname",
+ "count_by": "resource",
+ }
+
+ r = self.client.get(url, params=query_args)
+
+ r.raise_for_status()
+
+ report = r.json()
+
+ failures = 0
+
+ if report and "failures" in report[0]:
+ failures += report[0]["failures"]
+
+ if "logs" in api_urls[self.api_version]:
+ url = urljoin(self.base_url, api_urls[self.api_version]["logs"]).format(
+ hash=report_hash
+ )
+ self.client.get(url)
+
+ r.raise_for_status()
+
+ logs = r.json()
+
+ for log in logs:
+ if "tags" in log and "err" in log["tags"]:
+ failures += 1
+
+ return failures
+
+ def get_cert_names(self, node_name):
+ result = []
+
+ for node in self.fetch_node_information(node_name):
+ if "certname" in node:
+ result.append(node["certname"])
+ else:
+ result.append(node["name"])
+
+ return sorted(result)
+
+
+@nagiosplugin.guarded
+def main():
+ argp = argparse.ArgumentParser(description=__doc__)
+
+ argp.add_argument(
+ "-w",
+ "--warning",
+ type=int,
+ default=120,
+ help="Exit with WARNING status if nodes did not update for more then given minutes",
+ )
+ argp.add_argument(
+ "-c",
+ "--critical",
+ type=int,
+ default=1440,
+ help="Exit with CRITICAL status if nodes did not update for more then given minutes",
+ )
+ argp.add_argument(
+ "-W",
+ "--warnfails",
+ type=int,
+ default=1,
+ help="Exit with WARNING status if nodes had at least the given number of failures in the last run",
+ )
+ argp.add_argument(
+ "-C",
+ "--critfails",
+ type=int,
+ default=1,
+ help="Exit with CRITICAL status if nodes had at least the given number of failures in the last run",
+ )
+ argp.add_argument(
+ "-H",
+ "--hostname",
+ type=str,
+ default="localhost",
+ help="Hostname of the PuppetDB",
+ )
+ argp.add_argument(
+ "-p", "--port", type=int, default=8080, help="Port PuppetDB is running on"
+ )
+ argp.add_argument(
+ "-n",
+ "--node",
+ type=str,
+ help="Node name to check, if not given, all nodes will be checked",
+ )
+ argp.add_argument(
+ "-t",
+ "--tls",
+ action="store_true",
+ help="Use HTTPS instead of HTTP",
+ )
+ argp.add_argument(
+ "-k",
+ "--insecure",
+ action="store_true",
+ help="Allow connections via HTTPS without checking certificates",
+ )
+ argp.add_argument(
+ "-r",
+ "--roots",
+ type=str,
+ help="Use the given root certificate file for certificate validation",
+ )
+ argp.add_argument(
+ "-a",
+ "--apiversion",
+ dest="api_version",
+ type=int,
+ default=4,
+ choices=api_urls.keys(),
+ help="Specify PuppetDB API version",
+ )
+ argp.add_argument(
+ "-i",
+ "--ignore",
+ type=comma_separated,
+ help="Node names to ignore (comma-separated list)",
+ )
+ argp.add_argument(
+ "-v",
+ "--verbose",
+ action="count",
+ default=0,
+ help="increase output verbosity (use up to 3 times)",
+ )
+
+ args = argp.parse_args()
+
+ api_client = PuppetDBClient(
+ args.hostname, args.port, args.tls, args.insecure, args.roots, args.api_version
+ )
+
+ check = nagiosplugin.Check(PuppetDBReport(api_client, args.node, args.ignore))
+
+ for certname in api_client.get_cert_names(args.node):
+ check.add(BoolContext(f"missing-{certname}"))
+ check.add(
+ nagiosplugin.ScalarContext(
+ f"last-{certname}", args.warning * 60, args.critical * 60
+ )
+ )
+ check.add(
+ nagiosplugin.ScalarContext(
+ f"failed-{certname}", f"@{args.warnfails}:", f"@{args.critfails}:"
+ )
+ )
+
+ check.main(verbose=args.verbose)
+
+
+if __name__ == "__main__":
+ main()
diff --git a/sitemodules/profiles/files/icinga2_master/icinga2-git-pull-hook b/sitemodules/profiles/files/icinga2_master/icinga2-git-pull-hook
index a0d3711..c786017 100644
--- a/sitemodules/profiles/files/icinga2_master/icinga2-git-pull-hook
+++ b/sitemodules/profiles/files/icinga2_master/icinga2-git-pull-hook
@@ -88,6 +88,17 @@ class GitHookRequestHandler(BaseHTTPRequestHandler):
self.wfile.write(("%s\r\n" % message).encode("UTF-8"))
def _handle_pull(self):
+ args = [
+ "sshpass",
+ "-e",
+ "-P",
+ "passphrase",
+ "git",
+ "pull",
+ GIT_REPOSITORY,
+ GIT_BRANCH,
+ ]
+ self.log.info("running '%s'", " ".join(args))
try:
git_proc = subprocess.run(
[
@@ -96,15 +107,12 @@ class GitHookRequestHandler(BaseHTTPRequestHandler):
"-P",
"passphrase",
"git",
- "subtree",
"pull",
- "--prefix",
- "icinga2/conf.d",
GIT_REPOSITORY,
GIT_BRANCH,
],
env=ENV_FOR_GIT,
- cwd="/etc",
+ cwd=GIT_DIRECTORY,
stdout=subprocess.PIPE,
stderr=subprocess.STDOUT,
check=True,
diff --git a/sitemodules/profiles/manifests/base.pp b/sitemodules/profiles/manifests/base.pp
index fd6f225..ff3d9e4 100644
--- a/sitemodules/profiles/manifests/base.pp
+++ b/sitemodules/profiles/manifests/base.pp
@@ -14,9 +14,7 @@
#
# @param rootalias alias that gets emails for root
#
-# @param crl_job_enable whether to setup the hourly CRL update job
-#
-# @param crl_job_services which services to reload after the CRL update
+# @param crl_job configure the hourly CRL update job
#
# @param is_external whether the node is outside of CAcert infrastructure
#
@@ -36,15 +34,21 @@
# Copyright
# ---------
#
-# Copyright 2016-2021 Jan Dittberner
+# Copyright 2016-2022 Jan Dittberner
#
class profiles::base (
- Array[String] $admins = [],
- Hash[String, Data] $users = {},
- String $rootalias = "${trusted['certname']}-admin@cacert.org",
- Boolean $crl_job_enable = false,
- Array[String] $crl_job_services = [],
- Boolean $is_external = false,
+ Array[String] $admins = [],
+ Hash[String, Data] $users = {},
+ String $rootalias = "${trusted['certname']}-admin@cacert.org",
+ Hash[String, Data] $crl_job = {
+ 'enable' => false,
+ 'hostname' => $trusted['certname'],
+ 'services' => [],
+ 'check_url' => 'https://monitor.infra.cacert.org:5665/v1/actions/process-check-result',
+ 'api_user' => '',
+ 'api_password' => '',
+ },
+ Boolean $is_external = false,
) {
# ensure admin users for this container
$admins.each |String $username| {
@@ -172,7 +176,10 @@ class profiles::base (
repos => 'main',
release => "${::lsbdistcodename}-updates",
}
- if Integer($facts['os']['release']['major']) < 11 {
+
+ $os_major = Integer($facts['os']['release']['major'])
+
+ if $os_major < 11 {
apt::source { "security.debian.org-${::lsbdistcodename}-security":
location => 'http://security.debian.org/debian-security',
repos => 'main',
@@ -255,7 +262,11 @@ class profiles::base (
subscribe => [File[$cacert_class1_file], File[$cacert_class3_file]],
}
- if ($crl_job_enable) {
+ if ($crl_job['enable']) {
+ package { 'python3-requests':
+ ensure => installed,
+ }
+
file { '/var/local/ssl':
ensure => directory,
owner => 'root',
@@ -278,9 +289,17 @@ class profiles::base (
mode => '0755',
content => epp(
'profiles/base/update-crls.epp',
- { 'services' => $crl_job_services }),
+ {
+ 'services' => $crl_job['services'],
+ 'check_url' => $crl_job['check_url'],
+ 'api_user' => $crl_job['api_user'],
+ 'api_password' => $crl_job['api_password'],
+ 'hostname' => $crl_job['hostname'],
+ },
+ ),
require => [
Package['ca-certificates'],
+ Package['python3-requests'],
File['/var/local/ssl/crls'],
File[$cacert_class1_file],
File[$cacert_class3_file]
diff --git a/sitemodules/profiles/manifests/gitea.pp b/sitemodules/profiles/manifests/gitea.pp
index 27a882e..0f9d9f6 100644
--- a/sitemodules/profiles/manifests/gitea.pp
+++ b/sitemodules/profiles/manifests/gitea.pp
@@ -49,8 +49,8 @@ class profiles::gitea (
String $gitea_fqdn = 'code.cacert.org',
String $gitea_socket = '/run/gitea/gitea.sock',
) {
- $gitea_version = '1.16.6'
- $gitea_checksum = 'a96751af12d5e96301a97c280bafb92782e0e9b7a0bbe8960c704c0c0361e576'
+ $gitea_version = '1.16.9'
+ $gitea_checksum = '821dd30afed9ae42b18e727174b078ea9118a6ccc5106d8246bebf8180fcbef3'
$gitea_url = "https://dl.gitea.io/gitea/${gitea_version}/gitea-${gitea_version}-linux-amd64"
$gitea_service = '/etc/systemd/system/gitea.service'
diff --git a/sitemodules/profiles/manifests/icinga2_master.pp b/sitemodules/profiles/manifests/icinga2_master.pp
index e8f4968..6f83146 100644
--- a/sitemodules/profiles/manifests/icinga2_master.pp
+++ b/sitemodules/profiles/manifests/icinga2_master.pp
@@ -50,7 +50,7 @@
# Copyright
# ---------
#
-# Copyright 2019-2021 Jan Dittberner
+# Copyright 2019-2022 Jan Dittberner
class profiles::icinga2_master (
String $ido_database_password,
String $web2_database_password,
@@ -69,7 +69,7 @@ class profiles::icinga2_master (
include profiles::systemd_reload
include postgresql::server
- class { '::icinga2':
+ class { 'icinga2':
manage_repo => false,
features => ['mainlog', 'checker', 'notification'],
constants => {
@@ -78,7 +78,7 @@ class profiles::icinga2_master (
},
}
- class { '::icinga2::pki::ca':
+ class { 'icinga2::pki::ca':
ca_cert => $ca_certificate,
ca_key => $ca_key,
}
@@ -88,7 +88,7 @@ class profiles::icinga2_master (
password => postgresql_password('icinga2', $ido_database_password),
}
- class { '::icinga2::feature::idopgsql':
+ class { 'icinga2::feature::idopgsql':
user => 'icinga2',
password => $ido_database_password,
database => 'icinga2',
@@ -96,7 +96,7 @@ class profiles::icinga2_master (
require => Postgresql::Server::Db['icinga2'],
}
- class { '::icinga2::feature::api':
+ class { 'icinga2::feature::api':
pki => 'none',
}
@@ -123,7 +123,7 @@ class profiles::icinga2_master (
),
}
- class { '::icingaweb2':
+ class { 'icingaweb2':
manage_repo => false,
import_schema => true,
db_type => 'pgsql',
@@ -134,7 +134,7 @@ class profiles::icinga2_master (
require => Postgresql::Server::Db['icingaweb2'],
}
- class { '::icingaweb2::module::monitoring':
+ class { 'icingaweb2::module::monitoring':
ido_type => 'pgsql',
ido_host => 'localhost',
ido_port => 5432,
@@ -146,19 +146,19 @@ class profiles::icinga2_master (
transport => 'api',
username => 'root',
password => $api_users['root']['password'],
- }
- }
+ },
+ },
}
icingaweb2::config::authmethod { 'external-authentication':
backend => 'external',
- require => Class['::icingaweb2'],
+ require => Class['icingaweb2'],
}
icingaweb2::config::role { 'admin':
users => join($icingaweb_admins, ','),
permissions => '*',
- require => Class['::icingaweb2'],
+ require => Class['icingaweb2'],
}
package { ['sshpass', 'git']:
@@ -206,14 +206,21 @@ class profiles::icinga2_master (
notify => Exec['reload systemd configuration'],
}
- file { '/usr/local/lib/nagios-plugins':
+ file { '/usr/local/lib/nagios':
ensure => directory,
owner => 'root',
group => 'staff',
- mode => '0755'
+ mode => '0755',
}
- file { '/usr/local/lib/nagios-plugins/check_puppetdb_nodes':
+ file { '/usr/local/lib/nagios/plugins':
+ ensure => directory,
+ owner => 'root',
+ group => 'staff',
+ mode => '0755',
+ }
+
+ file { '/usr/local/lib/nagios/plugins/check_puppetdb_nodes':
ensure => file,
owner => 'root',
group => 'staff',
@@ -221,6 +228,19 @@ class profiles::icinga2_master (
source => 'puppet:///modules/profiles/icinga2_master/check_puppetdb_nodes',
}
+ package {['rsync', 'python3-nagiosplugin', 'python3-cryptography']:
+ ensure => present,
+ }
+
+ file { '/usr/local/lib/nagios/plugins/check_cacert_crl':
+ ensure => file,
+ owner => 'root',
+ group => 'root',
+ mode => '0755',
+ source => 'puppet:///modules/profiles/icinga2_external_commands/cacert_check_crl.py',
+ require => [Package['rsync'], Package['python3-nagiosplugin'], Package['python3-cryptography']],
+ }
+
service { 'icinga2-git-pull-hook':
ensure => running,
enable => true,
@@ -231,7 +251,7 @@ class profiles::icinga2_master (
],
}
- include ::icinga2
+ include icinga2
file { '/etc/icinga2/zones.d/global-templates':
ensure => directory,
@@ -262,10 +282,29 @@ class profiles::icinga2_master (
target => '/etc/icinga2/zones.d/global-templates/ocsp-command.conf',
}
::icinga2::object::checkcommand { 'cacert_crl':
- ensure => present,
- command => [
+ ensure => present,
+ command => [
'/usr/local/lib/nagios/plugins/check_cacert_crl',
],
+ arguments => {
+ '--rsync-url' => {
+ 'value' => '$cacert_crl_rsync_url$',
+ 'description' => 'rsync URL to check',
+ },
+ '--warning-last-age' => {
+ 'value' => '$cacert_crl_warning_last_age$',
+ 'description' => 'warning if last age is more than that many minutes',
+ },
+ '--critical-last-age' => {
+ 'value' => '$cacert_crl_critical_last_age$',
+ 'description' => 'critical if last age is more than that many minutes',
+ },
+ },
+ vars => {
+ 'cacert_crl_rsync_url' => 'rsync://crl.cacert.org/crl/',
+ 'cacert_crl_warning_last_age' => '1500', # 25h
+ 'cacert_crl_critical_last_age' => '2160', # 36h
+ },
target => '/etc/icinga2/zones.d/global-templates/cacert_crl-command.conf',
}
diff --git a/sitemodules/profiles/manifests/x509cert_common.pp b/sitemodules/profiles/manifests/x509cert_common.pp
index 935d44c..88edace 100644
--- a/sitemodules/profiles/manifests/x509cert_common.pp
+++ b/sitemodules/profiles/manifests/x509cert_common.pp
@@ -62,7 +62,7 @@ class profiles::x509cert_common (
file { "/etc/ssl/private/${name}.key.pem":
ensure => file,
owner => pick($cert_info['key_owner'], 'root'),
- group => pick($cert_info['key_group'], 'root'),
+ group => pick($cert_info['key_group'], 'ssl-cert'),
mode => pick($cert_info['key_mode'], '0640'),
content => $cert_info['private_key'],
}
diff --git a/sitemodules/profiles/templates/base/update-crls.epp b/sitemodules/profiles/templates/base/update-crls.epp
index eefdfe2..def45ab 100755
--- a/sitemodules/profiles/templates/base/update-crls.epp
+++ b/sitemodules/profiles/templates/base/update-crls.epp
@@ -1,30 +1,148 @@
-<%- | Array[String] $services | -%>
-#!/bin/sh
+<%- |
+ Array[String] $services,
+ String $check_url,
+ String $api_user,
+ String $api_password,
+ String $hostname,
+| -%>
+#!/usr/bin/env python3
# THIS FILE IS MANAGED BY PUPPET, MANUAL CHANGES WILL BE OVERWRITTEN AT THE
# NEXT PUPPET RUN.
-set -e
+import glob
+import subprocess
+import sys
+from datetime import datetime
+from os import path
-CRL_PATH='/var/local/ssl/crls/'
-CA_CERT='/etc/ssl/certs/ca-certificates.crt'
-RSYNC_LOCATION='crl.cacert.org::crl'
+import requests
-rsync -aqz "$RSYNC_LOCATION" "$CRL_PATH"
+CRL_PATH = "/var/local/ssl/crls/"
+CA_CERT = "/etc/ssl/certs/ca-certificates.crt"
+RSYNC_LOCATION = "crl2.intra.cacert.org::crl"
+ICINGA_CA = "/var/lib/icinga2/certs/ca.crt"
-for crl in "$CRL_PATH"*.crl
-do
- if openssl crl -noout -inform DER -in "$crl" -CAfile "$CA_CERT" 2>/dev/null
- then
- openssl crl -inform DER -in "$crl" -out "$crl".pem
- else
- echo "Error: Could not validate the CRL at $crl" >&2
- fi
-done
-c_rehash "$CRL_PATH" 2>/dev/null >&2
-<% $services.each |$service| { -%>
-service <%= $service %> reload > /dev/null
-<% } %>
+def json_timestamp(ts):
+ return int(ts.timestamp())
-exit 0
+
+def report_result(success, output, start):
+ data = {
+ "type": "Service",
+ "filter": 'host.name=="<%= $hostname %>" && service.name=="crl-sync"',
+ "exit_status": 0 if success else 2,
+ "plugin_output": "OK" if success else f"CRITICAL CRL sync failed\n{output}",
+ "check_source": "<%= $hostname %>",
+ "execution_start": json_timestamp(start),
+ "execution_end": json_timestamp(datetime.utcnow()),
+ "ttl": 3720,
+ }
+
+ r = requests.post(
+ "<%= $check_url %>",
+ auth=("<%= $api_user %>", "<%= $api_password %>"),
+ headers={"Accept": "application/json"},
+ json=data,
+ verify=ICINGA_CA,
+ )
+
+ if not r.ok:
+ print("could not submit passive check")
+ print(r.status_code, r.reason)
+ print(r.text)
+ sys.exit(1)
+
+
+def run_command(args, timeout=10):
+ try:
+ res = subprocess.run(args, capture_output=True, timeout=timeout, text=True)
+ except subprocess.TimeoutExpired:
+ return False, "timeout of {} expired running '{}'".format(
+ timeout, " ".join(args)
+ )
+
+ return res.returncode == 0, res.stderr
+
+
+def verify_crl(crl, ca_certificates=CA_CERT):
+ return run_command(
+ [
+ "openssl",
+ "crl",
+ "-noout",
+ "-inform",
+ "DER",
+ "-in",
+ crl,
+ "-CAfile",
+ ca_certificates,
+ ],
+ )
+
+
+def convert_to_pem(crl):
+ return run_command(
+ ["openssl", "crl", "-inform", "DER", "-in", crl, "-out", f"{crl}.pem"]
+ )
+
+
+def rehash_crls(crl_path=CRL_PATH):
+ return run_command(["c_rehash", crl_path])
+
+
+def run_rsync(rsync_source, dest_path):
+ return run_command(["rsync", "-aqz", rsync_source, dest_path], 60)
+
+
+def restart_service(service):
+ return run_command(["systemctl", "restart", f"{service}.service"], 30)
+
+
+def main():
+ start = datetime.utcnow()
+
+ ok, output = run_rsync(RSYNC_LOCATION, CRL_PATH)
+ if not ok:
+ report_result(False, f"rsync run failed:\n{output}", start)
+ return
+
+ error_output = []
+
+ for crl in glob.glob(path.join(CRL_PATH, "*.crl")):
+ ok, output = verify_crl(crl)
+ if not ok:
+ error_output.append(f"crl validation for {crl} failed:\n{output}")
+ continue
+
+ ok, output = convert_to_pem(crl)
+ if not ok:
+ error_output.append(f"pem conversion for {crl} failed:\n{output}")
+
+ if error_output:
+ report_result(False, "\n\n".join(error_output), start)
+ return
+
+ ok, output = rehash_crls(CRL_PATH)
+ if not ok:
+ report_result(False, f"c_rehash for {CRL_PATH} failed:\n{output}", start)
+ return
+
+ services = [<% if $services { %>"<%= $services.join(", ") %>"<% } %>]
+
+ for service in services:
+ ok, output = restart_service(service)
+ if not ok:
+ error_output.append(f"service restart failed for {service}:\n{output}")
+ continue
+
+ if error_output:
+ report_result(False, "\n\n".join(error_output), start)
+ return
+
+ report_result(True, "", start)
+
+
+if __name__ == "__main__":
+ main()
diff --git a/sitemodules/profiles/templates/gitea/app.ini.epp b/sitemodules/profiles/templates/gitea/app.ini.epp
index 0aa9945..a1854f2 100644
--- a/sitemodules/profiles/templates/gitea/app.ini.epp
+++ b/sitemodules/profiles/templates/gitea/app.ini.epp
@@ -81,6 +81,12 @@ COOKIE_SECURE = true
DOMAIN = <%= $gitea_fqdn %>
SAME_SITE = strict
+[migrations]
+ALLOW_LOCALNETWORKS = true
+
+[webhook]
+ALLOWED_HOST_LIST = external,private
+
[log]
MODE = file,console
ENABLE_ACCESS_LOG = true
diff --git a/sitemodules/profiles/templates/squid/squid.conf.epp b/sitemodules/profiles/templates/squid/squid.conf.epp
index cab60bf..d071279 100644
--- a/sitemodules/profiles/templates/squid/squid.conf.epp
+++ b/sitemodules/profiles/templates/squid/squid.conf.epp
@@ -13,3 +13,4 @@ http_access <%= $access_rule -%>
<% } %>
maximum_object_size 500 MB
+cache_dir aufs /var/spool/squid 20000 16 256
diff --git a/sitemodules/roles/manifests/authserver.pp b/sitemodules/roles/manifests/authserver.pp
new file mode 100644
index 0000000..792bc71
--- /dev/null
+++ b/sitemodules/roles/manifests/authserver.pp
@@ -0,0 +1,29 @@
+# Class: roles::authserver
+# ========================
+#
+# This class defines the authserver role for a Hydra OAuth2/OpenID connect API
+# server used for authentication/authorization.
+# You should assign this class using hiera or via an ENC.
+#
+# Examples
+# --------
+#
+# @example
+# class { 'roles::authserver': }
+#
+# Authors
+# -------
+#
+# Jan Dittberner <jandd@cacert.org>
+#
+# Copyright
+# ---------
+#
+# Copyright 2022 Jan Dittberner
+#
+class roles::authserver {
+ include profiles::base
+ include profiles::rsyslog
+ include profiles::icinga2_agent
+}
+
diff --git a/sitemodules/roles/manifests/idp.pp b/sitemodules/roles/manifests/idp.pp
new file mode 100644
index 0000000..2878931
--- /dev/null
+++ b/sitemodules/roles/manifests/idp.pp
@@ -0,0 +1,29 @@
+# Class: roles::idp
+# ========================
+#
+# This class defines the idp role for an OAuth2/OpenID identity provider
+# used for authentication/authorization.
+# You should assign this class using hiera or via an ENC.
+#
+# Examples
+# --------
+#
+# @example
+# class { 'roles::idp': }
+#
+# Authors
+# -------
+#
+# Jan Dittberner <jandd@cacert.org>
+#
+# Copyright
+# ---------
+#
+# Copyright 2022 Jan Dittberner
+#
+class roles::idp {
+ include profiles::base
+ include profiles::rsyslog
+ include profiles::icinga2_agent
+}
+