X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;ds=sidebyside;f=modules%2Fbacula%2Fmanifests%2Fdirector.pp;h=63b77a96699e68307aed27ba829671680215bb16;hb=b38b25513699ec5f30efb3019708f6ba98863990;hp=b94a9992def4ca7b37ca626c50eff2804676f7d1;hpb=fbda07eb15845bda281002fe76352ba46e6c5dda;p=mirror%2Fdsa-puppet.git diff --git a/modules/bacula/manifests/director.pp b/modules/bacula/manifests/director.pp index b94a9992d..63b77a966 100644 --- a/modules/bacula/manifests/director.pp +++ b/modules/bacula/manifests/director.pp @@ -1,64 +1,89 @@ class bacula::director inherits bacula { - package { - "bacula-director-pgsql": ensure => installed; - "bacula-common": ensure => installed; - "bacula-common-pgsql": ensure => installed; - } + package { ['bacula-director-pgsql', 'bacula-common', 'bacula-common-pgsql']: + ensure => installed + } - service { - "bacula-director": - ensure => running, - enable => true, - hasstatus => true, - require => Package["bacula-director-pgsql"]; - } - file { - "/etc/bacula/conf.d": - ensure => directory, - mode => 755, - group => bacula, - purge => true, - notify => Exec["bacula-director restart"] - ; - "/etc/bacula/bacula-dir.conf": - content => template("bacula/bacula-dir.conf.erb"), - mode => 440, - group => bacula, - require => Package["bacula-director-pgsql"], - notify => Exec["bacula-director restart"] - ; - } + service { 'bacula-director': + ensure => running, + enable => true, + hasstatus => true, + require => Package['bacula-director-pgsql'] + } - exec { - "bacula-director restart": - path => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin", - refreshonly => true; - } + exec { 'bacula-director reload': + path => '/usr/bin:/usr/sbin:/bin:/sbin', + command => 'service bacula-director reload', + refreshonly => true, + } - define bacula_client() { - # These must be kept in sync with the settings in bacula.pp - $bacula_client_name = "${name}-fd" - $bacula_client_secret = hmac("/etc/puppet/secret", "bacula-fd-${name}") - $client = $name + file { '/etc/bacula/conf.d': + ensure => directory, + mode => '0755', + group => bacula, + purge => true, + force => true, + recurse => true, + source => 'puppet:///files/empty/', + notify => Exec['bacula-director reload'] + } - file { - "/etc/bacula/conf.d/${name}.conf": - content => template("bacula/per-client.conf.erb"), - mode => 440, - group => bacula, - notify => Exec["bacula-director restart"] - ; - } - } -# $allhosts = keys($site::allnodeinfo) - $allhosts = [ "berlioz.debian.org" ] - bacula_client { $allhosts: } + file { '/etc/bacula/bacula-dir.conf': + content => template('bacula/bacula-dir.conf.erb'), + mode => '0440', + group => bacula, + require => Package['bacula-director-pgsql'], + notify => Exec['bacula-director reload'] + } - @ferm::rule { 'dsa-bacula-dir': - domain => '(ip ip6)', - description => 'Allow bacula access from localhost', - rule => "proto tcp mod state state (NEW) dport (bacula-dir) saddr ($bacula_director_address localhost) ACCEPT", - } + @ferm::rule { 'dsa-bacula-dir': + domain => '(ip)', + description => 'Allow bacula access from localhost', + rule => "proto tcp mod state state (NEW) dport (bacula-dir) saddr (${bacula_director_ip} localhost) ACCEPT", + } + file { '/etc/bacula/conf.d/empty.conf': + content => '', + mode => '0440', + group => bacula, + require => Package['bacula-director-pgsql'], + notify => Exec['bacula-director reload'] + } + + Bacula::Node<<| |>> + + package { 'bacula-console': + ensure => installed; + } + + file { '/etc/bacula/bconsole.conf': + content => template('bacula/bconsole.conf.erb'), + mode => '0640', + group => bacula, + require => Package['bacula-console'] + } + + package { 'python3-psycopg2': ensure => installed } + file { '/etc/bacula/scripts/volume-purge-action': + mode => '0555', + source => 'puppet:///modules/bacula/volume-purge-action', + ; + } + file { '/etc/bacula/scripts/volumes-delete-old': + mode => '0555', + source => 'puppet:///modules/bacula/volumes-delete-old', + ; + } + file { '/etc/bacula/storages-list.d': + ensure => directory, + mode => '0755', + group => bacula, + purge => true, + force => true, + recurse => true, + source => 'puppet:///files/empty/', + } + file { "/etc/cron.d/puppet-bacula-stuff": + source => 'puppet:///modules/bacula/crontab-director', + } }