X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fbacula%2Fmanifests%2Fdirector.pp;h=86c903d6d07cdb9390bac58beb136ce6f87d2efe;hb=891ab115f249a1c7e186cca9145989112353a5a0;hp=4ae22ca1200f941f589d5108532a56ff4bbea68e;hpb=a4496a23900af3d62f9cad5a67984c397b1a6e72;p=mirror%2Fdsa-puppet.git diff --git a/modules/bacula/manifests/director.pp b/modules/bacula/manifests/director.pp index 4ae22ca12..86c903d6d 100644 --- a/modules/bacula/manifests/director.pp +++ b/modules/bacula/manifests/director.pp @@ -10,6 +10,18 @@ class bacula::director inherits bacula { hasstatus => true, require => Package['bacula-director-pgsql'] } + systemd::override { 'bacula-director': + content => @(EOT) + [Unit] + After=unbound.service + | EOT + } + + exec { 'bacula-director reload': + path => '/usr/bin:/usr/sbin:/bin:/sbin', + command => 'service bacula-director reload', + refreshonly => true, + } file { '/etc/bacula/conf.d': ensure => directory, @@ -19,7 +31,7 @@ class bacula::director inherits bacula { force => true, recurse => true, source => 'puppet:///files/empty/', - notify => Service['bacula-director'] + notify => Exec['bacula-director reload'] } file { '/etc/bacula/bacula-dir.conf': @@ -27,13 +39,7 @@ class bacula::director inherits bacula { mode => '0440', group => bacula, require => Package['bacula-director-pgsql'], - notify => Service['bacula-director'] - } - - @ferm::rule { 'dsa-bacula-dir': - domain => '(ip ip6)', - description => 'Allow bacula access from localhost', - rule => "proto tcp mod state state (NEW) dport (bacula-dir) saddr (${bacula_director_address} localhost) ACCEPT", + notify => Exec['bacula-director reload'] } file { '/etc/bacula/conf.d/empty.conf': @@ -41,7 +47,7 @@ class bacula::director inherits bacula { mode => '0440', group => bacula, require => Package['bacula-director-pgsql'], - notify => Service['bacula-director'] + notify => Exec['bacula-director reload'] } Bacula::Node<<| |>> @@ -56,4 +62,48 @@ class bacula::director inherits bacula { group => bacula, require => Package['bacula-console'] } + + package { 'python3-psycopg2': ensure => installed } + file { '/etc/bacula/scripts/volume-purge-action': + mode => '0555', + source => 'puppet:///modules/bacula/volume-purge-action', + ; + } + file { '/etc/bacula/scripts/volumes-delete-old': + mode => '0555', + source => 'puppet:///modules/bacula/volumes-delete-old', + ; + } + file { '/etc/bacula/storages-list.d': + ensure => directory, + mode => '0755', + group => bacula, + purge => true, + force => true, + recurse => true, + source => 'puppet:///files/empty/', + } + file { '/usr/local/sbin/dsa-bacula-scheduler': + source => 'puppet:///modules/bacula/dsa-bacula-scheduler', + mode => '0555', + } + + file { "/etc/cron.d/puppet-bacula-stuff": ensure => absent, } + concat::fragment { 'dsa-puppet-stuff--bacula-director': + target => '/etc/cron.d/dsa-puppet-stuff', + content => @(EOF) + @daily root chronic /etc/bacula/scripts/volume-purge-action -v + @daily root chronic /etc/bacula/scripts/volumes-delete-old -v + */3 * * * * root sleep $(( $RANDOM \% 60 )); flock -w 0 -e /usr/local/sbin/dsa-bacula-scheduler /usr/local/sbin/dsa-bacula-scheduler + | EOF + } + + concat { $bacula::bacula_dsa_client_list: + } + concat::fragment { 'bacula-dsa-client-list::header' : + target => $bacula::bacula_dsa_client_list, + content => "", + order => '00', + } + Concat::Fragment <<| tag == $bacula::tag_bacula_dsa_client_list |>> }