X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fbacula%2Fmanifests%2Fdirector.pp;h=b48eedcb9283005f3f9a6d7bbe2abbd7df0e8c61;hb=d51af02fd82a924f3d491055cfe72291d8854b52;hp=40720b7496c7ff8f05fd2e99354fed44ab4d5f6b;hpb=0b542d43d901e68c421958d59642a67f5ebbbd53;p=mirror%2Fdsa-puppet.git

diff --git a/modules/bacula/manifests/director.pp b/modules/bacula/manifests/director.pp
index 40720b749..b48eedcb9 100644
--- a/modules/bacula/manifests/director.pp
+++ b/modules/bacula/manifests/director.pp
@@ -1,56 +1,60 @@
 class bacula::director inherits bacula {
+	bacula::node { $::fqdn: }
 
-  package {
-    "bacula-director-pgsql": ensure => installed;
-    "bacula-common": ensure => installed;
-    "bacula-common-pgsql": ensure => installed;
-  }
-
-  service {
-    "bacula-director":
-      ensure => running,
-      enable => true,
-      hasstatus => true,
-      require => Package["bacula-director-pgsql"];
-  }
-  file {
-    "/etc/bacula/conf.d":
-      ensure  => directory,
-      mode => 755,
-      group => bacula,
-      notify  => Exec["bacula-director restart"]
-      ;
-    "/etc/bacula/bacula-dir.conf":
-      content => template("bacula/bacula-dir.conf.erb"),
-      mode => 440,
-      group => bacula,
-      require => Package["bacula-director-pgsql"],
-      notify  => Exec["bacula-director restart"]
-      ;
-  }
-
-  exec {
-    "bacula-director restart":
-      path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
-      refreshonly => true;
-  }
-
-  define bacula_client() {
-    # These must be kept in sync with the settings in bacula.pp
-    $bacula_client_name       = "${name}-fd"
-    $bacula_client_secret     = hmac("/etc/puppet/secret", "bacula-fd-${name}")
-    $client = $name
-
-    file {
-      "/etc/bacula/conf.d/${name}.conf":
-      content => template("bacula/per-client.conf.erb"),
-      mode => 440,
-      group => bacula,
-      notify  => Exec["bacula-director restart"]
-      ;
-    }
-  }
-  $allhosts = keys($site::allnodeinfo)
-
-  bacula_client { $allhosts: }
+	package { ['bacula-director-pgsql', 'bacula-common', 'bacula-common-pgsql']:
+		ensure => installed
+	}
+
+	service { 'bacula-director':
+		ensure    => running,
+		enable    => true,
+		hasstatus => true,
+		require   => Package['bacula-director-pgsql']
+	}
+
+	file { '/etc/bacula/conf.d':
+		ensure  => directory,
+		mode    => '0755',
+		group   => bacula,
+		purge   => true,
+		force   => true,
+		recurse => true,
+		source  => 'puppet:///files/empty/',
+		notify  => Service['bacula-director']
+	}
+
+	file { '/etc/bacula/bacula-dir.conf':
+		content => template('bacula/bacula-dir.conf.erb'),
+		mode    => '0440',
+		group   => bacula,
+		require => Package['bacula-director-pgsql'],
+		notify  => Service['bacula-director']
+	}
+
+	@ferm::rule { 'dsa-bacula-dir':
+		domain      => '(ip ip6)',
+		description => 'Allow bacula access from localhost',
+		rule        => "proto tcp mod state state (NEW) dport (bacula-dir) saddr (${bacula_director_address} localhost) ACCEPT",
+	}
+
+	file { '/etc/bacula/conf.d/empty.conf':
+		content => '',
+		mode    => '0440',
+		group   => bacula,
+		require => Package['bacula-director-pgsql'],
+		notify  => Service['bacula-director']
+	}
+
+	Bacula::Node<<| |>>
+
+	package { 'bacula-console':
+		ensure => installed;
+	}
+
+	file { '/etc/bacula/bconsole.conf':
+		content => template('bacula/bconsole.conf.erb'),
+		mode    => '0640',
+		group   => bacula,
+		require => Package['bacula-console']
+	}
 }