# For Bacula release 5.0.1 (24 February 2010) -- debian 5.0.4
Storage {
- Name = <%= bacula_storage_name %>
- SDPort = <%= bacula_storage_port %>
+ Name = <%= @bacula_storage_name %>
+ SDAddresses = {
+ # bacula, on Debian 9 (stretch), does not resolve a single name
+ # to both v4 and v6 addresses. Se we can't just say
+ # ip = { addr = <hostname> }. Boo.
+ <%- if scope.lookupvar('deprecated::nodeinfo')['misc']['has_v4_ldap'] -%>
+ ipv4 = {
+ # use the hostname rather than the IP address from LDAP,
+ # as /etc/hosts might have a better answer in case of natted hosts.
+ addr = <%= @bacula_storage_address %>
+ port = <%= @bacula_storage_port %>
+ }
+ <%- end -%>
+ <%- if scope.lookupvar('deprecated::nodeinfo')['misc']['has_v6_ldap'] -%>
+ ipv6 = {
+ addr = <%= @bacula_storage_address %>
+ port = <%= @bacula_storage_port %>
+ }
+ <%- end -%>
+ }
WorkingDirectory = "/var/lib/bacula"
- Pid Directory = "/var/run/bacula"
+ Pid Directory = "/run/bacula"
+ Plugin Directory = "/usr/lib/bacula"
Maximum Concurrent Jobs = 21
- SDAddress = <%= bacula_storage_address %>
+ Heartbeat Interval = 60
+
+ TLS Enable = yes
+ TLS Require = yes
+ TLS Verify Peer = yes
+ # TLS Allowed CN = "clientcerts/<%= @bacula_director_address %>"
+ TLS CA Certificate File = "<%= @bacula_ca_path %>"
+ # This is a server certificate, used for incoming connections.
+ TLS Certificate = "<%= @bacula_ssl_server_cert %>"
+ TLS Key = "<%= @bacula_ssl_server_key %>"
}
# List Directors who are permitted to contact Storage daemon
#
Director {
- Name = <%= bacula_director_name %>
- Password = "<%= bacula_storage_secret %>"
-}
+ Name = <%= @bacula_director_name %>
+ Password = "<%= @bacula_storage_secret %>"
+ TLS Enable = yes
+ TLS Require = yes
+ TLS Verify Peer = yes
+ TLS Allowed CN = "clientcerts/<%= @bacula_director_address %>"
+ TLS CA Certificate File = "<%= @bacula_ca_path %>"
+ # This is a server certificate, used for incoming director connections.
+ TLS Certificate = "<%= @bacula_ssl_server_cert %>"
+ TLS Key = "<%= @bacula_ssl_server_key %>"
+}
-# To connect, the Director's bacula-dir.conf must have the
-# same Name and MediaType.
+# Send all messages to the Director,
+# mount messages also are sent to the email address
#
+Messages {
+ Name = Standard
+ director = <%= @bacula_director_name %> = all
+}
+
Device {
- Name = <%= bacula_filestor_device %>
- Media Type = <%= bacula_filestor_name %>
- Archive Device = <%= bacula_backup_path %>
+ Name = "<%= @bacula_filestor_device %>-catalog"
+ Media Type = "<%= @bacula_filestor_name %>-catalog"
+ Archive Device = "<%= @bacula_backup_path %>/Catalog"
LabelMedia = yes;
Random Access = Yes;
AutomaticMount = yes;
RemovableMedia = no;
AlwaysOpen = no;
- Maximum Network Buffer Size = 65536
}
-# Send all messages to the Director,
-# mount messages also are sent to the email address
-#
-Messages {
- Name = Standard
- director = <%= bacula_director_name %> = all
-}
+@|"sh -c 'for f in /etc/bacula/storage-conf.d/*.conf ; do echo @${f} ; done'"