hieradata: enable debian -security for trixie (and document it)

Ref #91

Author: Krinkle

doc/puppet.md

@@ -82,6 +82,13 @@ multiple profiles, use the shared part of the profile name (for example
 Private Hiera data is stored in `/srv/git/puppet/private/` on the
 Puppet server. For now, follow the instructions in `README` to edit.
 
+## Adding a new Debian version
+
+* Add codename to `type Debian::Codename` in `/modules/debian/types/codename.pp`
+* Add codename to `profile::base::apt::security_supported_versions` in `/hierdata/common/yaml`
+* Add version from https://packages.debian.org/stable/php to `/modules/php/manifests/init.pp`
+* Add version from https://packages.debian.org/stable/postgresql to `/modules/postgresql/manifests/init.pp`
+
 ## Managing user accounts
 
 ### Human users and groups

hieradata/common.yaml

@@ -515,7 +515,7 @@ profile::wordpress::docs::enable_object_cache: true
 profile::wordpress::blogs::admin_email: infrastructure-team@jquery.com
 profile::wordpress::blogs::wordpress_version: ~
 
-profile::base::apt::security_supported_versions: [bullseye, bookworm]
+profile::base::apt::security_supported_versions: [bullseye, bookworm, trixie]
 
 profile::base::accounts:
   krinkle:

modules/debian/types/codename.pp

@@ -1,2 +1,2 @@
 # @summary supported debian version codename
-type Debian::Codename = Enum['bullseye', 'bookworm']
+type Debian::Codename = Enum['bullseye', 'bookworm', 'trixie']

modules/postgresql/manifests/init.pp

@@ -4,6 +4,8 @@
   $pg_version = debian::codename() ? {
     'bullseye' => '13',
     'bookworm' => '15',
+    'trixie'   => '17',
+    default    => fail('postgresql: unsupported debian version'),
   }
 
   ensure_packages([