Make director_secret for bconsole something local to the director class
[mirror/dsa-puppet.git] / modules / bacula / manifests / init.pp
1 # bacula class -- defines all the variables we care about in our bacula deployment
2 #
3 # @param public_addresses this host's public IP addresses.  The ones it connects out from and is reachable from outsite.
4 class bacula (
5   String  $bacula_operator_email      = 'bacula-reports@admin.debian.org',
6   String  $bacula_director_name       = 'debian-dir',
7   String  $bacula_storage_name        = 'debian-sd',
8   String  $bacula_client_name         = "${::fqdn}-fd",
9   String  $bacula_monitor_name        = 'debian-mon',
10
11   String  $bacula_director_address    = 'dinis.debian.org',
12   String  $bacula_storage_address     = 'storace.debian.org',
13
14   String  $bacula_db_secret           = hkdf('/etc/puppet/secret', "bacula-db-${::hostname}"),
15   String  $bacula_client_secret       = hkdf('/etc/puppet/secret', "bacula-fd-${::fqdn}"),
16   String  $bacula_monitor_secret      = hkdf('/etc/puppet/secret', "bacula-monitor-${bacula_director_name}"),
17
18   String  $bacula_ca_path             = '/etc/ssl/debian/certs/ca.crt',
19   String  $bacula_ssl_client_cert     = '/etc/ssl/debian/certs/thishost.crt',
20   String  $bacula_ssl_client_key      = '/etc/ssl/private/thishost.key',
21   String  $bacula_ssl_server_cert     = '/etc/ssl/debian/certs/thishost-server.crt',
22   String  $bacula_ssl_server_key      = '/etc/ssl/private/thishost-server.key',
23
24   String  $bacula_dsa_client_list     = '/etc/bacula/dsa-clients',
25   String  $tag_bacula_dsa_client_list = 'bacula::dsa::clientlist',
26
27   Array[Stdlib::IP::Address] $public_addresses = $base::public_addresses,
28 ) {
29   file { '/usr/local/sbin/bacula-idle-restart':
30     mode   => '0555',
31     source => 'puppet:///modules/bacula/bacula-idle-restart',
32   }
33 }