]> git.decadent.org.uk Git - dak.git/blob - config/debian/dak.conf
Add option to specify CAs to trust for LDAP connection over TLS
[dak.git] / config / debian / dak.conf
1 Dinstall
2 {
3    SigningKeyring "/srv/ftp-master.debian.org/s3kr1t/dot-gnupg/secring.gpg";
4    SigningPubKeyring "/srv/ftp-master.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
5 //   SendmailCommand "/usr/sbin/sendmail -odq -oi -t -f envelope@ftp-master.debian.org";
6    SendmailCommand "/usr/sbin/sendmail -oi -t -f envelope@ftp-master.debian.org";
7    MyEmailAddress "Debian FTP Masters <ftpmaster@ftp-master.debian.org>";
8    MyAdminAddress "ftpmaster@ftp-master.debian.org";
9    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
10    MyDistribution "Debian"; // Used in emails
11    BugServer "bugs.debian.org";
12    PackagesServer "packages.debian.org";
13    TrackingServer "packages.qa.debian.org";
14    Bcc "archive@ftp-master.debian.org";
15    SkipTime 300;
16    BXANotify "true";
17    CloseBugs "true";
18    OverrideDisparityCheck "true";
19    DefaultSuite "unstable";
20    LintianTags "/srv/ftp-master.debian.org/dak/config/debian/lintian.tags";
21    ReleaseTransitions "/srv/ftp.debian.org/web/transitions.yaml";
22    // if you setup an own dak repository and want to upload Debian packages you most possibly want
23    // to set the following option to a real path/filename and then enter those mail addresses that
24    // you want to be able to receive mails generated by your dak installation. This avoids spamming
25    // the real maintainers of a package you upload with mail.
26    // format of entries: one entry per line. Either an email address directly, or a regular expression,
27    // prefixed by "RE:". Examples: "jane.doe@domain.com" or "RE:jane[^@]@domain.com", where the first will
28    // only allow to mail jane.doe@domain.com while the second will mail all of jane*@domain.com
29    //  MailWhiteList "/some/path/to/a/file";
30 };
31
32 Transitions
33 {
34    Notifications "debian-devel@lists.debian.org";
35 };
36
37 Generate-Index-Diffs
38 {
39    Options
40    {
41      TempDir "/srv/ftp-master.debian.org/tiffani";
42      MaxDiffs { Default 56; };
43    };
44 };
45
46 Show-New
47 {
48   HTMLPath "/srv/ftp.debian.org/web/new/";
49   Options::Queue "new,backports-new";
50 }
51
52 Show-Deferred
53 {
54   LinkPath "/srv/ftp.debian.org/web/deferred/";
55   DeferredQueue "/srv/upload.debian.org/DEFERRED/";
56 }
57
58 Import-Users-From-Passwd
59 {
60   ValidGID "800";
61   // Comma separated list of users who are in Postgres but not the passwd file
62   KnownPostgres "postgres,dak,dak-unpriv,katie,release,qa,www-data,guest,repuser";
63 };
64
65 Clean-Queues
66 {
67   Options
68   {
69     Days 14;
70    };
71  MorgueSubDir "queues";
72 };
73
74 Control-Overrides
75 {
76   Options
77   {
78     Component "main";
79     Suite "unstable";
80     Type "deb";
81    };
82 };
83
84 Rm
85 {
86   Options
87   {
88     Suite "unstable";
89    };
90
91    LogFile "/srv/ftp.debian.org/web/removals.txt";
92    LogFile822 "/srv/ftp.debian.org/web/removals.822";
93    Bcc "removed-packages@qa.debian.org";
94 };
95
96 Import-LDAP-Fingerprints
97 {
98   LDAPDn "ou=users,dc=debian,dc=org";
99   LDAPServer "db.debian.org";
100   CACertFile "/etc/ssl/certs/spi-cacert-2008.pem";
101   ExtraKeyrings
102   {
103     "/srv/keyring.debian.org/keyrings/removed-keys.pgp";
104     "/srv/keyring.debian.org/keyrings/removed-keys.gpg";
105     "/srv/keyring.debian.org/keyrings/extra-keys.pgp";
106   };
107   KeyServer "wwwkeys.eu.pgp.net";
108 };
109
110 Clean-Suites
111 {
112   // How long (in seconds) dead packages are left before being killed
113   StayOfExecution 129600; // 1.5 days
114   MorgueSubDir "pool";
115 };
116
117 Process-New
118 {
119   LockDir "/srv/ftp-master.debian.org/lock/new/";
120 };
121
122 Check-Overrides
123 {
124   OverrideSuites
125   {
126     Stable
127     {
128       Process "0";
129     };
130
131     Testing
132     {
133       Process "1";
134       OriginSuite "Unstable";
135     };
136
137     Unstable
138     {
139       Process "1";
140     };
141   };
142 };
143
144 Suite
145 {
146   Stable
147   {
148        Components
149        {
150          main;
151          contrib;
152          non-free;
153        };
154   };
155
156   Proposed-Updates
157   {
158         Components
159         {
160           main;
161           contrib;
162           non-free;
163         };
164   };
165
166   Testing
167   {
168         Components
169         {
170           main;
171           contrib;
172           non-free;
173         };
174   };
175
176   Testing-Proposed-Updates
177   {
178         Components
179         {
180           main;
181           contrib;
182           non-free;
183         };
184   };
185
186   Squeeze-Updates
187   {
188         Components
189         {
190           main;
191           contrib;
192           non-free;
193         };
194   };
195
196   Unstable
197   {
198         Components
199         {
200           main;
201           contrib;
202           non-free;
203         };
204   };
205
206   Experimental
207   {
208         Components
209         {
210           main;
211           contrib;
212           non-free;
213         };
214   };
215 };
216
217 SuiteMappings
218 {
219  "silent-map squeeze-security oldstable-security";
220  "silent-map wheezy-security stable-security";
221  "silent-map jessie-security testing-security";
222  "propup-version stable-security testing testing-proposed-updates unstable";
223  "propup-version testing-security unstable";
224  "map squeeze oldstable";
225  "map squeeze-proposed-updates oldstable-proposed-updates";
226  "map squeeze-updates oldstable-proposed-updates";
227  "map wheezy stable";
228  "map wheezy-proposed-updates proposed-updates";
229  "map wheezy-updates proposed-updates";
230  "map jessie testing";
231  "map jessie-proposed-updates testing-proposed-updates";
232  "map jessie-updates testing-proposed-updates";
233  "map sid unstable";
234  "map rc-buggy experimental";
235  "map oldstable oldstable-proposed-updates";
236  "map oldstable-security oldstable-proposed-updates";
237  "map oldstable-updates oldstable-proposed-updates";
238  "map stable proposed-updates";
239  "map stable-security proposed-updates";
240  "map stable-proposed-updates proposed-updates";
241  "map stable-updates proposed-updates";
242  "map testing-updates testing-proposed-updates";
243  "map-unreleased stable unstable";
244  "map-unreleased proposed-updates unstable";
245  "map testing testing-proposed-updates";
246  "map testing-security testing-proposed-updates";
247  "map-unreleased testing unstable";
248  "map-unreleased testing-proposed-updates unstable";
249 };
250
251 AutomaticByHandPackages {
252   "debian-faq" {
253     Source "debian-faq";
254     Section "byhand";
255     Extension "gz";
256     Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-debian-faq";
257   };
258
259   "debian-installer-images" {
260     Source "debian-installer";
261     Section "raw-installer";
262     Extension "tar.gz";
263     Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-di";
264   };
265
266   "tag-overrides" {
267     Source "tag-overrides";
268     Section "byhand";
269     Extension "tar.gz";
270     Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-tag";
271   };
272
273   "task-overrides" {
274     Source "tasksel";
275     Section "byhand";
276     Extension "tar.gz";
277     Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-task";
278   };
279
280   "win32-loader" {
281     Source "win32-loader";
282     Section "byhand";
283     Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-win32-loader";
284   };
285 };
286
287 Dir
288 {
289   Base "/srv/ftp-master.debian.org/";
290   Root "/srv/ftp-master.debian.org/ftp/";
291   Pool "/srv/ftp-master.debian.org/ftp/pool/";
292   Templates "/srv/ftp-master.debian.org/dak/templates/";
293   Lists "/srv/ftp-master.debian.org/database/dists/";
294   Cache "/srv/ftp-master.debian.org/database/";
295   Log "/srv/ftp-master.debian.org/log/";
296   Lock "/srv/ftp-master.debian.org/lock";
297   Morgue "/srv/ftp-master.debian.org/morgue/";
298   Override "/srv/ftp-master.debian.org/scripts/override/";
299   UrgencyLog "/srv/release.debian.org/britney/input/urgencies/";
300   TempPath "/srv/ftp-master.debian.org/tmp/";
301   BTSVersionTrack "/srv/ftp-master.debian.org/queue/bts_version_track/";
302   Holding "/srv/ftp-master.debian.org/queue/holding/";
303   Done "/srv/ftp-master.debian.org/queue/done/";
304   Reject "/srv/ftp-master.debian.org/queue/reject/";
305 };
306
307 Queue-Report
308 {
309   ReportLocations
310   {
311     822Location "/srv/ftp.debian.org/web/new.822";
312   };
313 };
314
315 DB
316 {
317   Service "projectb";
318   // PoolSize should be at least ThreadCount + 1
319   PoolSize 5;
320   // MaxOverflow shouldn't exceed postgresql.conf's max_connections - PoolSize
321   MaxOverflow 13;
322   // should be false for encoding == SQL_ASCII
323   Unicode "false"
324 };
325
326 Urgency
327 {
328   Default "low";
329   Valid
330   {
331     low;
332     medium;
333     high;
334     emergency;
335     critical;
336   };
337 };
338
339 Contents
340 {
341   Header "contents";
342   Root "/srv/ftp-master.debian.org/test/";
343 }
344
345 Common
346 {
347   // The default number of threads for multithreading parts of dak:
348   ThreadCount 16;
349 }
350
351 Changelogs
352 {
353   Testing "/srv/release.debian.org/tools/trille/current-testing";
354   Britney "/srv/ftp-master.debian.org/ftp/dists/testing/ChangeLog";
355   Export "/srv/ftp-master.debian.org/export/changelogs";
356 }
357
358 Generate-Releases
359 {
360   MD5Sum
361   {
362     proposed-updates;
363     stable;
364     squeeze-updates;
365     testing;
366     testing-proposed-updates;
367     unstable;
368     experimental;
369   };
370   SHA1
371   {
372     proposed-updates;
373     squeeze-updates;
374     stable;
375     testing;
376     testing-proposed-updates;
377     unstable;
378     experimental;
379   };
380   SHA256
381   {
382     proposed-updates;
383     squeeze-updates;
384     stable;
385     testing;
386     testing-proposed-updates;
387     unstable;
388     experimental;
389   };
390 }
391
392 ByGroup {
393   dak-unpriv "/srv/ftp-master.debian.org/dak/config/debian/dak.conf-dak";
394   ftpteam "";
395   backports "/srv/ftp-master.debian.org/dak/config/debian/dak.conf-backports";
396 };
397
398 Command::DM {
399   ACL "dm";
400   AdminKeyrings {
401     "/srv/keyring.debian.org/keyrings/debian-keyring.gpg";
402   };
403   Keyrings {
404     "/srv/keyring.debian.org/keyrings/debian-maintainers.gpg";
405   };
406 };
407
408 Command::DM-Admin {
409   AdminFingerprints {
410     "AB41C1C68AFD668CA045EBF8673A03E4C1DB921F"; // gwolf
411     "0E3A94C3E83002DAB88CCA1694FA372B2DA8B985"; // noodles
412
413     "80E976F14A508A48E9CA3FE9BC372252CA1CF964"; // ansgar
414     "FBFABDB541B5DC955BD9BA6EDB16CF5BB12525C4"; // joerg
415     "309911BEA966D0613053045711B4E5FF15B0FD82"; // mhy
416   };
417 };