Change ssh keys to ecdsa

modules/filterserver/manifests/init.pp

 class filterserver {
   class {'nginx':
     worker_processes => 2,
     worker_connections => 4000,
     ssl_session_cache => off,
   }
 
   class {'statsclient':
     log_path => '/var/log/nginx/access_log_easylist_downloads.1.gz',
   }
@@ skipping 84 matching lines @@
      content => 'filtermaster.adblockplus.org ',
      order => 1,
   }
 
    concat::fragment {'filtermaster_hostkey':
      target => '/home/rsync/.ssh/known_hosts',
      source => 'puppet:///modules/private/filtermaster.adblockplus.org_ssh.pub',
      order => 2,
   }
 
-  file {'/home/rsync/.ssh/id_rsa':
+  file {'/home/rsync/.ssh/id_ecdsa':

[Wladimir Palant, 2013/11/18 17:36:23]

Actually, this change should be reverted - for identifying the *client* SSH uses
whatever key is there. And we already have an RSA key on all clients.

     ensure => file,
     require => [
                  File['/home/rsync/.ssh'],
                  User['rsync']
                ],
     owner => rsync,
     mode => 0400,
     source => 'puppet:///modules/private/rsync@easylist-downloads.adblockplus.org'
   }
 
-  file {'/home/rsync/.ssh/id_rsa.pub':
+  file {'/home/rsync/.ssh/id_ecdsa.pub':
     ensure => file,
     require => [
                  File['/home/rsync/.ssh'],
                  User['rsync']
                ],
     owner => rsync,
     mode => 0400,
     source => 'puppet:///modules/private/rsync@easylist-downloads.adblockplus.org.pub'
   }
 
   cron {'mirror':
     ensure => present,
     require => [
                  File['/home/rsync/.ssh/known_hosts'],
-                 File['/home/rsync/.ssh/id_rsa'],
+                 File['/home/rsync/.ssh/id_ecdsa'],
                  User['rsync']
                ],
-    command => 'rsync -e ssh -ltprz --delete rsync@filtermaster.adblockplus.org:. /var/www/easylist/',
+    command => 'rsync -e "ssh -o CheckHostIP=no" -ltprz --delete rsync@filtermaster.adblockplus.org:. /var/www/easylist/',

[Felix Dahlke, 2013/11/18 16:29:22]

This seems unrelated, but I guess this is what we need for the cron mails to
stop?

     environment => ['MAILTO=admins@adblockplus.org,root'],
     user => rsync,
     hour => '*',
     minute => '2-52/10'
   }
 }