Make bacula-fd run as user bacula on stretch

[mirror/dsa-puppet.git] / modules / bacula / manifests / client.pp

diff --git a/modules/bacula/manifests/client.pp b/modules/bacula/manifests/client.pp
index 34e2b64..0b2b671 100644 (file)
--- a/modules/bacula/manifests/client.pp
+++ b/modules/bacula/manifests/client.pp
@@ -2,7 +2,9 @@ class bacula::client inherits bacula {
        @@bacula::storage-per-node { $::fqdn: }
 
        if ! getfromhash($site::nodeinfo, 'not-bacula-client') {
-               @@bacula::node { $::fqdn: }
+               @@bacula::node { $::fqdn:
+                       bacula_client_port => $bacula::bacula_client_port,
+               }
        }
 
        package { ['bacula-fd']:
@@ -48,6 +50,13 @@ class bacula::client inherits bacula {
                require => Package['bacula-fd'],
                notify  => Service['bacula-fd'],
        }
+       file { '/etc/systemd/system/bacula-fd.service.d/user.conf':
+               source  => 'puppet:///modules/bacula/bacula-fd-systemd',
+               mode    => '0400',
+               owner   => root,
+               group   => root,
+               notify  => Service['bacula-fd'],
+       }
 
        @ferm::rule { 'dsa-bacula-fd-v4':
                domain      => '(ip)',