1 # the ipsec tunnel between fasolo and storace, so that our backups work
2 # despite all the evil firewalls that might try to block our traffic.
3 class profile::ipsec::fasolo_storace {
5 # Use the first ipv4 address from LDAP, since the puppet fact is not always
6 # the IP address we want to use. For instance, for storace $::facts['ipaddress']
7 # is 172.29.170.1 (from bond1) instead of 93.94.130.161 from eth0.
8 $public_ipaddress = getfromhash($site::nodeinfo, 'misc', 'v4_ldap')[0]
10 # we do ipsec on the backend since it traveres over other people's switching infra
11 ipsec::network { "fasolo_storace":
12 peer_ipaddress => $public_ipaddress,