register in frontend

global/overlay/etc/puppet/cosmos-rules.yaml

@@ -23,6 +23,13 @@ p1.komreg.net:
    sunet_iaas_cloud:
    autoupdate:
    md_publisher:
+   sunet::frontend::register_sites:
+     sites:
+       'qa.komreg.se':
+         frontends:
+            - 'se-fre-lb-1.sunet.se'
+            - 'se-tug-lb-1.sunet.se'
+         port: '443'
 
 '^md[0-9]\.komreg\.net$':
    sunet_iaas_cloud:

global/overlay/etc/puppet/manifests/cosmos-site.pp

@@ -146,14 +146,15 @@ class md_signer($dest_host="localhost",$dest_dir="") {
    }
 }
 
-class md_publisher(Array $allow_clients = [], String $dir = "/var/www/html") {
+class md_publisher(Array $allow_clients = ['any'], String $dir = "/var/www/html") {
    sunet::rrsync {$dir:
       ro                => false,
       ssh_key           => safe_hiera('publisher_ssh_key',"NOT SET IN HIERA"),
       ssh_key_type      => safe_hiera('publisher_ssh_key_type',"HOT SET IN HIERA")
-   }
+   } ->
    package {'lighttpd': ensure => latest } ->
    service {'lighttpd': ensure => running } ->
+   apparmor::profile { 'usr.sbin.lighttpd': source => '/etc/apparmor-cosmos/usr.sbin.lighttpd' } ->
    sunet::misc::ufw_allow {'allow-lighttpd':
       from   => $allow_clients,
       port   => 80