- do not let file with passwords to be world readable

    ( even if being readable by apache is not good either, but needed as the password is used by apache )
- use ldaps for sympa
- use the 2 new facter macro and remove the version copied everywhere
- remove hardcoded domain in bugzilla and others

2 files changed, 4 insertions, 4 deletions

diff --git a/modules/transifex/manifests/init.pp b/modules/transifex/manifests/init.pp
index 73322e9d..32069430 100644
--- a/modules/transifex/manifests/init.pp
+++ b/modules/transifex/manifests/init.pp
@@ -8,8 +8,8 @@ class transifex {
     path => "/etc/transifex/20-engines.conf",
     ensure => present,
     owner => root,
-    group => root,
-    mode => 755,
+    group => apache,
+    mode => 640,
     content => template("transifex/20-engines.conf")
   }
 
@@ -18,7 +18,7 @@ class transifex {
     ensure => present,
     owner => root,
     group => root,
-    mode => 755,
+    mode => 644,
     content => template("transifex/30-site.conf")
   }
 
diff --git a/modules/transifex/templates/20-engines.conf b/modules/transifex/templates/20-engines.conf
index ed826902..1906a438 100644
--- a/modules/transifex/templates/20-engines.conf
+++ b/modules/transifex/templates/20-engines.conf
@@ -10,7 +10,7 @@ DATABASE_NAME = 'transifex'
 # The following are not used for sqlite3
 DATABASE_USER = 'transifex'
 DATABASE_PASSWORD = '<%= password %>'
-DATABASE_HOST = 'pgsql.mageia.org'           # Set to empty string for local socket
+DATABASE_HOST = 'pgsql.<%= domain %>'           # Set to empty string for local socket
 DATABASE_PORT = ''             # Set to empty string for default
 
 ## Caching (optional)