{"host": "mirror1001.wikimedia.org", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 2974, "only_in_self": ["Concat::Fragment[/etc/rsyncd.conf-debian]", "Concat_fragment[/etc/rsyncd.conf-debian]", "Ferm::Service[mirrors_ssh]", "File[/etc/ferm/conf.d/10_mirrors_ssh]", "Firewall::Service[mirrors_ssh]", "Nftables::Service[mirrors_ssh]"], "only_in_other": [], "resource_diffs": [{"resource": "Monitoring::Service[check_debian_mirror]", "parameters": "--- Monitoring::Service[check_debian_mirror].orig\n+++ Monitoring::Service[check_debian_mirror]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/ssh/userkeys/mirror]", "parameters": "--- File[/etc/ssh/userkeys/mirror].orig\n+++ File[/etc/ssh/userkeys/mirror]\n\n@@\n-    ensure => file\n+    ensure => absent\n"}, {"resource": "Concat::Fragment[/etc/rsyncd.conf-debian]", "parameters": "--- Concat::Fragment[/etc/rsyncd.conf-debian].orig\n+++ Concat::Fragment[/etc/rsyncd.conf-debian]\n\n-    target => /etc/rsyncd.conf\n-    order  => 10\n"}, {"resource": "File[/etc/nagios/nrpe.d/check_check_debian_mirror.cfg]", "parameters": "--- File[/etc/nagios/nrpe.d/check_check_debian_mirror.cfg].orig\n+++ File[/etc/nagios/nrpe.d/check_check_debian_mirror.cfg]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Ferm::Service[mirrors_ssh]", "parameters": "--- Ferm::Service[mirrors_ssh].orig\n+++ Ferm::Service[mirrors_ssh]\n\n-    ensure              => present\n-    notrack             => False\n-    prio                => 10\n-    port                => 22\n-    desc                => \n-    srange              => ['syncproxy2.wna.debian.org']\n-    unrestricted_access => False\n-    proto               => tcp\n"}, {"resource": "Monitoring::Exported_nagios_service[mirror1001 check_debian_mirror]", "parameters": "--- Monitoring::Exported_nagios_service[mirror1001 check_debian_mirror].orig\n+++ Monitoring::Exported_nagios_service[mirror1001 check_debian_mirror]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Nrpe::Check[check_check_debian_mirror]", "parameters": "--- Nrpe::Check[check_check_debian_mirror].orig\n+++ Nrpe::Check[check_check_debian_mirror]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Concat_fragment[/etc/rsyncd.conf-debian]", "content": "--- /etc/rsyncd.conf-debian.orig\n+++ /etc/rsyncd.conf-debian\n@@ -1,20 +0,0 @@\n-# This file is being maintained by Puppet.\n-# DO NOT EDIT\n-\n-[ debian ]\n-path            = /srv/mirrors/debian/\n-read only       = yes\n-write only      = no\n-list            = yes\n-uid             = nobody\n-gid             = nogroup\n-use chroot      = yes\n-\n-\n-max connections = 0\n-\n-\n-\n-\n-\n-", "parameters": "--- Concat_fragment[/etc/rsyncd.conf-debian].orig\n+++ Concat_fragment[/etc/rsyncd.conf-debian]\n\n-    target => /etc/rsyncd.conf\n-    tag    => _etc_rsyncd.conf\n-    order  => 10\n"}, {"resource": "Ssh::Userkey[mirror]", "parameters": "--- Ssh::Userkey[mirror].orig\n+++ Ssh::Userkey[mirror]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Nrpe::Monitor_service[check_debian_mirror]", "parameters": "--- Nrpe::Monitor_service[check_debian_mirror].orig\n+++ Nrpe::Monitor_service[check_debian_mirror]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Rsync::Server::Module[debian]", "parameters": "--- Rsync::Server::Module[debian].orig\n+++ Rsync::Server::Module[debian]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Firewall::Service[mirrors_ssh]", "parameters": "--- Firewall::Service[mirrors_ssh].orig\n+++ Firewall::Service[mirrors_ssh]\n\n-    ensure              => present\n-    notrack             => False\n-    prio                => 10\n-    port                => 22\n-    desc                => \n-    srange              => ['syncproxy2.wna.debian.org']\n-    unrestricted_access => False\n-    proto               => tcp\n"}, {"resource": "File[/etc/ferm/conf.d/10_mirrors_ssh]", "content": "--- /etc/ferm/conf.d/10_mirrors_ssh.orig\n+++ /etc/ferm/conf.d/10_mirrors_ssh\n@@ -1,6 +0,0 @@\n-# Autogenerated by puppet. DO NOT EDIT BY HAND!\n-#\n-# \n-&R_SERVICE(tcp, 22, (140.211.166.217 2605:bc80:3010:b00:0:deb:166:217));\n-\n-", "parameters": "--- File[/etc/ferm/conf.d/10_mirrors_ssh].orig\n+++ File[/etc/ferm/conf.d/10_mirrors_ssh]\n\n-    group   => root\n-    tag     => ferm\n-    ensure  => present\n-    require => File[/etc/ferm/conf.d]\n-    owner   => root\n-    mode    => 0400\n-    notify  => Service[ferm]\n"}, {"resource": "Nftables::Service[mirrors_ssh]", "parameters": "--- Nftables::Service[mirrors_ssh].orig\n+++ Nftables::Service[mirrors_ssh]\n\n-    ensure              => present\n-    notrack             => False\n-    src_ips             => ['140.211.166.217', '2605:bc80:3010:b00:0:deb:166:217']\n-    prio                => 10\n-    port                => 22\n-    desc                => \n-    unrestricted_access => False\n-    proto               => tcp\n"}], "perc_changed": "0.67%"}, "core": {"total": 2974, "only_in_self": ["Concat_fragment[/etc/rsyncd.conf-debian]", "File[/etc/ferm/conf.d/10_mirrors_ssh]"], "only_in_other": [], "resource_diffs": [{"resource": "File[/etc/ssh/userkeys/mirror]", "parameters": "--- File[/etc/ssh/userkeys/mirror].orig\n+++ File[/etc/ssh/userkeys/mirror]\n\n@@\n-    ensure => file\n+    ensure => absent\n"}, {"resource": "File[/etc/nagios/nrpe.d/check_check_debian_mirror.cfg]", "parameters": "--- File[/etc/nagios/nrpe.d/check_check_debian_mirror.cfg].orig\n+++ File[/etc/nagios/nrpe.d/check_check_debian_mirror.cfg]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}], "perc_changed": "0.13%"}, "main": {"total": 2974, "only_in_self": ["Concat::Fragment[/etc/rsyncd.conf-debian]", "Concat_fragment[/etc/rsyncd.conf-debian]", "Ferm::Service[mirrors_ssh]", "File[/etc/ferm/conf.d/10_mirrors_ssh]", "Firewall::Service[mirrors_ssh]", "Nftables::Service[mirrors_ssh]"], "only_in_other": [], "resource_diffs": [{"resource": "Monitoring::Service[check_debian_mirror]", "parameters": "--- Monitoring::Service[check_debian_mirror].orig\n+++ Monitoring::Service[check_debian_mirror]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/ssh/userkeys/mirror]", "parameters": "--- File[/etc/ssh/userkeys/mirror].orig\n+++ File[/etc/ssh/userkeys/mirror]\n\n@@\n-    ensure => file\n+    ensure => absent\n"}, {"resource": "Ssh::Userkey[mirror]", "parameters": "--- Ssh::Userkey[mirror].orig\n+++ Ssh::Userkey[mirror]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Nrpe::Monitor_service[check_debian_mirror]", "parameters": "--- Nrpe::Monitor_service[check_debian_mirror].orig\n+++ Nrpe::Monitor_service[check_debian_mirror]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Rsync::Server::Module[debian]", "parameters": "--- Rsync::Server::Module[debian].orig\n+++ Rsync::Server::Module[debian]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/nagios/nrpe.d/check_check_debian_mirror.cfg]", "parameters": "--- File[/etc/nagios/nrpe.d/check_check_debian_mirror.cfg].orig\n+++ File[/etc/nagios/nrpe.d/check_check_debian_mirror.cfg]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Monitoring::Exported_nagios_service[mirror1001 check_debian_mirror]", "parameters": "--- Monitoring::Exported_nagios_service[mirror1001 check_debian_mirror].orig\n+++ Monitoring::Exported_nagios_service[mirror1001 check_debian_mirror]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Nrpe::Check[check_check_debian_mirror]", "parameters": "--- Nrpe::Check[check_check_debian_mirror].orig\n+++ Nrpe::Check[check_check_debian_mirror]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}], "perc_changed": "0.47%"}}}