diff --git a/Vagrantfile b/Vagrantfile
index c3872de..c9d5fc2 100644
--- a/Vagrantfile
+++ b/Vagrantfile
@@ -1,920 +1,949 @@
 Vagrant.require_version ">= 2.2.0"
 ENV["LC_ALL"] = "en_US.UTF-8"
 
 # Default configuration for all defines node below
 environment = "staging"
 environment_path = "/tmp/puppet/environments"
 manifest_file = "site.pp"
 manifests_path = "swh-site/manifests"
 puppet_options = "--fileserverconfig=/etc/puppet/fileserver.conf --verbose"  # --debug --trace"
 puppet_staging_facts = {
   "vagrant_testing" => "1",
   "testing"         => "vagrant",
   "deployment"      => "staging",
   "subnet"          => "vagrant"
 }
 puppet_production_facts = {
   "vagrant_testing" => "1",
   "testing"         => "vagrant",
   "deployment"      => "production",
   "subnet"          => "vagrant"
 }
 puppet_admin_facts = {
   "vagrant_testing" => "1",
   "testing"         => "vagrant",
   "deployment"      => "admin",
   "subnet"          => "vagrant"
 }
 # used to define the local vm template path
 puppet_env_path = ENV["SWH_PUPPET_ENVIRONMENT_HOME"]
 
 # Images/local configuration (libvirt)
 $local_debian10_box = "debian10-20201012-1352"
 $local_debian10_box_url = "file://#{puppet_env_path}/packer/builds/swh-debian-10.6-amd64-20201012-1352.qcow2"
 
 # Images/remote configuration
 $global_debian10_box = "debian10-20201012-1352"
 $global_debian10_box_url = "https://annex.softwareheritage.org/public/isos/libvirt/debian/swh-debian-10.6-amd64-20201012-1352.qcow2"
 
 unless Vagrant.has_plugin?("libvirt")
   $stderr.puts <<-MSG
   vagrant-libvirt plugin is required for this.
   To install: `$ sudo apt install vagrant-libvirt
 MSG
   exit 1
 end
 
 Vagrant.configure("2") do |global_config|
   ################
   ## STAGING
   ################
   global_config.vm.define :"staging-webapp" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "webapp.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.30", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-rp0" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "rp0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.20", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 512
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-db1" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "db1.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.11", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 512
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-storage1" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "storage1.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.41", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-objstorage0" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "objstorage0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.110", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 512
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-deposit" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "deposit.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.31", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 512
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-worker0" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "worker0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.100", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   # indexer worker
   global_config.vm.define :"staging-worker3" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "worker3.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.103", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-scheduler0" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "scheduler0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.50", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-journal0" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "journal0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.70", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-esnode0" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "search-esnode0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.80", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-search0" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "search0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.90", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-counters0" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "counters0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.95", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-clearly-defined" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "clearly-defined.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.200", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   ################
   # ADMIN
   ################
   global_config.vm.define :"bojimans" do |config|
     # config.ssh.insert_key = false
 
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "bojimans.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.199", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 512
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"pergamon" do |config|
     # config.ssh.insert_key = false
 
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "pergamon.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.29", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 512
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "production"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   ################
   ## PRODUCTION
   ################
   global_config.vm.define :"prod-worker01" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "worker01.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.21", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"esnode1" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "esnode1.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.61", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"esnode2" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "esnode2.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.62", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"esnode3" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "esnode3.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.63", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"logstash" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "logstash0.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.19", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 2048
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"admin-bardo" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "bardo.internal.admin.swh.network"
     config.vm.network   :private_network, ip: "10.168.50.10", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_admin_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"admin-rp1" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "rp1.internal.admin.swh.network"
     config.vm.network   :private_network, ip: "10.168.50.20", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_admin_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"prod-webapp1" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "webapp1.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.71", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
+  global_config.vm.define :"prod-moma" do |config|
+    config.vm.box                     = $global_debian10_box
+    config.vm.box_url                 = $global_debian10_box_url
+    config.vm.hostname                = "moma.softwareheritage.org"
+    config.vm.network   :private_network, ip: "10.168.100.31", netmask: "255.255.0.0"
+
+    config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
+    # ssl certificates share
+    config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
+
+    config.vm.provider :libvirt do |provider|
+      provider.memory = 4096
+      provider.cpus = 2
+      # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
+      provider.driver = 'kvm'
+    end
+
+    config.vm.provision "puppet" do |puppet|
+      puppet.environment_path = "#{environment_path}"
+      puppet.environment = "#{environment}"
+      puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
+      puppet.manifest_file = "#{manifest_file}"
+      puppet.manifests_path = "#{manifests_path}"
+      puppet.options = "#{puppet_options}"
+      puppet.facter = puppet_production_facts
+      puppet.synced_folder_type = 'nfs'
+    end
+  end
+
   global_config.vm.define :"prod-search1" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "search1.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.85", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"prod-search-esnode1" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "search-esnode1.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.81", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"prod-search-esnode2" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "search-esnode2.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.82", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"prod-search-esnode3" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "search-esnode3.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.83", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   ################
   ## MISC
   ################
   global_config.vm.define :test do |config|
     config.ssh.insert_key = false
 
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update = false
     config.vm.hostname                = "test.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.30", netmask: "255.255.0.0"
     config.vm.network   :private_network, ip: "10.168.101.30", netmask: "255.255.0.0"
     config.vm.network "forwarded_port", guest: 10030, host: 22
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 512
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 end
diff --git a/vagrant/le_certs/archive_production/cert.pem b/vagrant/le_certs/archive_production/cert.pem
new file mode 100644
index 0000000..214d46c
--- /dev/null
+++ b/vagrant/le_certs/archive_production/cert.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/archive_production/chain.pem b/vagrant/le_certs/archive_production/chain.pem
new file mode 100644
index 0000000..214d46c
--- /dev/null
+++ b/vagrant/le_certs/archive_production/chain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/archive_production/fullchain.pem b/vagrant/le_certs/archive_production/fullchain.pem
new file mode 100644
index 0000000..214d46c
--- /dev/null
+++ b/vagrant/le_certs/archive_production/fullchain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/archive_production/privkey.pem b/vagrant/le_certs/archive_production/privkey.pem
new file mode 100644
index 0000000..579cdd6
--- /dev/null
+++ b/vagrant/le_certs/archive_production/privkey.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/vagrant/le_certs/deposit_production/cert.pem b/vagrant/le_certs/deposit_production/cert.pem
new file mode 100644
index 0000000..5c313d8
--- /dev/null
+++ b/vagrant/le_certs/deposit_production/cert.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/deposit_production/chain.pem b/vagrant/le_certs/deposit_production/chain.pem
new file mode 100644
index 0000000..5c313d8
--- /dev/null
+++ b/vagrant/le_certs/deposit_production/chain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/deposit_production/fullchain.pem b/vagrant/le_certs/deposit_production/fullchain.pem
new file mode 100644
index 0000000..5c313d8
--- /dev/null
+++ b/vagrant/le_certs/deposit_production/fullchain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/deposit_production/privkey.pem b/vagrant/le_certs/deposit_production/privkey.pem
new file mode 100644
index 0000000..47f3c52
--- /dev/null
+++ b/vagrant/le_certs/deposit_production/privkey.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----