rsync-secrets.erb

MAILTO="<%= scope.lookupvar('::config::puppet_notif_email') %>"
# note that this rsync runs locally as root, but remotely as puppetsync; the -e
# instructs SSH to use puppetsync's SSH, and to use known_hosts appropriately
*/5 * * * * root rsync -e 'ssh -l puppetsync -i <%= @puppetsync_home %>/.ssh/puppetsync_rsa -oBatchMode=yes -oStrictHostKeyChecking=yes -oCheckHostIP=no' --delete -rlpt --exclude '*.tmp' --exclude environments/ <%= @distinguished_master %>:/etc/hiera/ /etc/hiera/
MAILTO=root