dak/config/debian/dak.conf

Dinstall
{
   SigningHomedir "/srv/ftp-master.debian.org/s3kr1t/dot-gnupg";
   SigningPassphraseFile "/srv/ftp-master.debian.org/s3kr1t/yubikey/pin";
   SigningKeyring "/srv/ftp-master.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   SigningPubKeyring "/srv/ftp-master.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
//   SendmailCommand "/usr/sbin/sendmail -odq -oi -t -f envelope@ftp-master.debian.org";
   SendmailCommand "/usr/sbin/sendmail -oi -t -f envelope@ftp-master.debian.org";
   MyEmailAddress "Debian FTP Masters <ftpmaster@ftp-master.debian.org>";
   MyAdminAddress "ftpmaster@ftp-master.debian.org";
   MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
   MyDistribution "Debian"; // Used in emails
   BugServer "bugs.debian.org";
   PackagesServer "packages.debian.org";
   TrackingServer "tracker.debian.org";
   Bcc "archive@ftp-master.debian.org";
   SkipTime 300;
   BXANotify "true";
   CloseBugs "true";
   OverrideDisparityCheck "true";
   DefaultSuite "unstable";
   LintianTags "/srv/ftp-master.debian.org/dak/config/debian/lintian.tags";
   ReleaseTransitions "/srv/ftp.debian.org/web/transitions.yaml";
   AllowSourceOnlyUploads true;
   AllowSourceOnlyNewKeys { "F275CBDDEE2EDD382EE95A7AAA06688AEF8AF8D5"; };
   // if you setup an own dak repository and want to upload Debian packages you most possibly want
   // to set the following option to a real path/filename and then enter those mail addresses that
   // you want to be able to receive mails generated by your dak installation. This avoids spamming
   // the real maintainers of a package you upload with mail.
   // format of entries: one entry per line. Either an email address directly, or a regular expression,
   // prefixed by "RE:". Examples: "jane.doe@domain.com" or "RE:jane[^@]@domain.com", where the first will
   // only allow to mail jane.doe@domain.com while the second will mail all of jane*@domain.com
   //  MailWhiteList "/some/path/to/a/file";
};

Transitions
{
   Notifications "debian-devel@lists.debian.org";
};

Generate-Index-Diffs
{
   Options
   {
     Archive "ftp-master,debian-debug";
     TempDir "/srv/ftp-master.debian.org/tiffani";
     MaxDiffs { Default 56; };
   };
};

Show-New
{
  HTMLPath "/srv/ftp.debian.org/web/new/";
  Options::Queue "new,backports-new";
}

Show-Deferred
{
  LinkPath "/srv/ftp-master.debian.org/deferred/";
  DeferredQueue "/srv/upload.debian.org/DEFERRED/";
}

Import-Users-From-Passwd
{
  ValidGID "Debian";
  // Comma separated list of users who are in Postgres but not the passwd file
  KnownPostgres "postgres,dak,dak-unpriv,katie,release,qa,www-data,guest,repuser,debian-backup,dak-code,codesign";
};

Clean-Queues
{
  Options
  {
    Days 14;
   };
 MorgueSubDir "queues";
};

Control-Overrides
{
  Options
  {
    Component "main";
    Suite "unstable";
    Type "deb";
   };
};

Rm
{
  Options
  {
    Suite "unstable";
   };

   LogFile "/srv/ftp.debian.org/web/removals.txt";
   LogFile822 "/srv/ftp.debian.org/web/removals.822";
   Bcc "removed-packages@qa.debian.org";
};

Import-LDAP-Fingerprints
{
  LDAPDn "ou=users,dc=debian,dc=org";
  LDAPServer "db.debian.org";
  CACertFile "/etc/ssl/ca-debian/ca-certificates.crt";
  ExtraKeyrings
  {
    "/srv/keyring.debian.org/keyrings/removed-keys.pgp";
    "/srv/keyring.debian.org/keyrings/removed-keys.gpg";
    "/srv/keyring.debian.org/keyrings/extra-keys.pgp";
  };
  KeyServer "wwwkeys.eu.pgp.net";
};

Clean-Suites
{
  MorgueSubDir "pool";
};

Process-New
{
  LockDir "/srv/ftp-master.debian.org/lock/new/";
};

SuiteMappings
{
 "silent-map wheezy-security oldoldstable-security";
 "silent-map jessie-security oldstable-security";
 "silent-map jessie-kfreebsd-security oldstable-kfreebsd-security";
 "silent-map stretch-security stable-security";
 "silent-map buster-security testing-security";
 "propup-version stable-security testing testing-proposed-updates unstable";
 "propup-version testing-security unstable";
 "map wheezy oldoldstable";
 "map wheezy-proposed-updates oldoldstable-proposed-updates";
 "map wheezy-updates oldoldstable-proposed-updates";
 "map jessie oldstable";
 "map jessie-proposed-updates oldstable-proposed-updates";
 "map jessie-updates oldstable-proposed-updates";
 "map jessie-kfreebsd oldstable-kfreebsd";
 "map jessie-kfreebsd-proposed-updates oldstable-kfreebsd-proposed-updates";
 "map stretch stable";
 "map stretch-proposed-updates proposed-updates";
 "map stretch-updates proposed-updates";
 "map buster testing";
 "map buster-proposed-updates testing-proposed-updates";
 "map buster-updates testing-proposed-updates";
 "map sid unstable";
 "map rc-buggy experimental";
 "map oldoldstable oldoldstable-proposed-updates";
 "map oldoldstable-security oldoldstable-proposed-updates";
 "map oldoldstable-updates oldoldstable-proposed-updates";
 "map oldstable oldstable-proposed-updates";
 "map oldstable-security oldstable-proposed-updates";
 "map oldstable-updates oldstable-proposed-updates";
 "map oldstable-kfreebsd oldstable-kfreebsd-proposed-updates";
 "map oldstable-kfreebsd-security oldstable-kfreebsd-proposed-updates";
 "map stable proposed-updates";
 "map stable-security proposed-updates";
 "map stable-proposed-updates proposed-updates";
 "map stable-updates proposed-updates";
 "map testing-updates testing-proposed-updates";
 "map-unreleased stable unstable";
 "map-unreleased proposed-updates unstable";
 "map testing testing-proposed-updates";
 "map testing-security testing-proposed-updates";
 "map-unreleased testing unstable";
 "map-unreleased testing-proposed-updates unstable";

 "reject oldoldstable-proposed-updates";
 "reject oldstable-proposed-updates";
 "reject oldstable-kfreebsd";
 "reject wheezy-updates";
 "reject jessie-updates";
 "reject stretch-updates";
 "reject buster-updates";
};

AutomaticByHandPackages {
  "debian-faq" {
    Source "debian-faq";
    Section "byhand";
    Extension "gz";
    Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-debian-faq";
  };

  "ftpsync" {
    Source "archvsync";
    Section "byhand";
    Extension "tar.gz";
    Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-ftpsync";
  };

  "debian-installer-images" {
    Source "debian-installer";
    Section "raw-installer";
    Extension "tar.gz";
    Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-di";
  };

  "tag-overrides" {
    Source "tag-overrides";
    Section "byhand";
    Extension "tar.gz";
    Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-tag";
  };

  "task-overrides" {
    Source "tasksel";
    Section "byhand";
    Extension "tar.gz";
    Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-task";
  };

  "win32-loader" {
    Source "win32-loader";
    Section "byhand";
    Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-win32-loader";
  };
};

Dir
{
  Base "/srv/ftp-master.debian.org/";
  Root "/srv/ftp-master.debian.org/ftp/";
  Pool "/srv/ftp-master.debian.org/ftp/pool/";
  Templates "/srv/ftp-master.debian.org/dak/templates/";
  Lists "/srv/ftp-master.debian.org/database/dists/";
  Cache "/srv/ftp-master.debian.org/database/";
  Log "/srv/ftp-master.debian.org/log/";
  Lock "/srv/ftp-master.debian.org/lock";
  Morgue "/srv/ftp-master.debian.org/morgue/";
  Override "/srv/ftp-master.debian.org/scripts/override/";
  UrgencyLog "/srv/ftp.debian.org/web/britney/urgencies/";
  TempPath "/srv/ftp-master.debian.org/tmp/";
  BTSVersionTrack "/srv/ftp-master.debian.org/queue/bts_version_track/";
  Done "/srv/ftp-master.debian.org/queue/done/";
  Reject "/srv/ftp-master.debian.org/queue/reject/";
  BuildinfoArchive "/srv/ftp-master.debian.org/buildinfo/";
};

Queue-Report
{
  ReportLocations
  {
    822Location "/srv/ftp.debian.org/web/new.822";
  };
};

DB
{
  Service "projectb";
  // PoolSize should be at least ThreadCount + 1
  PoolSize 5;
  // MaxOverflow shouldn't exceed postgresql.conf's max_connections - PoolSize
  MaxOverflow 13;
  // should be false for encoding == SQL_ASCII
  Unicode "false"
};

Urgency
{
  Default "low";
  Valid
  {
    low;
    medium;
    high;
    emergency;
    critical;
  };
};

Contents
{
  Root "/srv/ftp-master.debian.org/test/";
}

Common
{
  // The default number of threads for multithreading parts of dak:
  ThreadCount 16;
}

ByGroup {
  dak-unpriv "/srv/ftp-master.debian.org/dak/config/debian/dak.conf-dak";
  ftpteam "";
  backports "/srv/ftp-master.debian.org/dak/config/debian/dak.conf-backports";
};

Command::DM {
  ACL "dm";
  AdminKeyrings {
    "/srv/keyring.debian.org/keyrings/debian-keyring.gpg";
  };
  Keyrings {
    "/srv/keyring.debian.org/keyrings/debian-maintainers.gpg";
    "/srv/keyring.debian.org/keyrings/debian-nonupload.gpg";
  };
};

Command::DM-Admin {
  AdminFingerprints {
    "AB41C1C68AFD668CA045EBF8673A03E4C1DB921F"; // gwolf
    "A4626CBAFF376039D2D7554497BA9CE761A0963B"; // johns
    "0E3A94C3E83002DAB88CCA1694FA372B2DA8B985"; // noodles

    "80E976F14A508A48E9CA3FE9BC372252CA1CF964"; // ansgar
    "FBFABDB541B5DC955BD9BA6EDB16CF5BB12525C4"; // joerg
    "309911BEA966D0613053045711B4E5FF15B0FD82"; // mhy
  };
};

Include {
  "/srv/ftp-master.debian.org/dak/config/debian/external-signatures.conf";
};

External-Signature-Requests {
  Default-Suites {
    "experimental";
    "unstable";
    "testing-proposed-updates";
    "stretch-backports";
  };
  Export "/srv/ftp-master.debian.org/public/incoming.debian.org/web/debian-buildd/project/external-signatures/requests.json";
  ExportSigningKeys { "69E6775AC793814879D7406D761F1FE865C742EC"; };
};