X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fbacula%2Fmanifests%2Fstorage.pp;h=e6738672d67f902a6d4798539fb3bbb0498bf00b;hb=6a6f323df04506d53a2d5fb8e30765ec216877d9;hp=f0a09df7a84b509b8a693e0df1e123ed476cf773;hpb=09e1d27cb215e73b1e80684b9e4b13e5ab93a29b;p=mirror%2Fdsa-puppet.git diff --git a/modules/bacula/manifests/storage.pp b/modules/bacula/manifests/storage.pp index f0a09df7a..e6738672d 100644 --- a/modules/bacula/manifests/storage.pp +++ b/modules/bacula/manifests/storage.pp @@ -1,42 +1,32 @@ class bacula::storage inherits bacula { - package { - "bacula-sd": ensure => installed; - } + package { 'bacula-sd': + ensure => installed + } - service { - "bacula-sd": - ensure => running, - enable => true, - hasstatus => true, - ; - } - file { - "/etc/bacula/bacula-sd.conf": - content => template("bacula/bacula-sd.conf.erb"), - mode => 640, - group => bacula, - notify => Exec["bacula-sd restart"] - ; - } + service { 'bacula-sd': + ensure => running, + enable => true, + hasstatus => true, + } + file { '/etc/bacula/bacula-sd.conf': + content => template('bacula/bacula-sd.conf.erb'), + mode => '0640', + group => bacula, + notify => Service['bacula-sd'] + } - exec { - "bacula-sd restart": - path => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin", - refreshonly => true; - } + @ferm::rule { 'dsa-bacula-sd-v4': + domain => '(ip)', + description => 'Allow bacula-sd access from director and clients', + rule => 'proto tcp mod state state (NEW) dport (bacula-sd) @subchain \'bacula-sd\' { saddr ($HOST_DEBIAN_V4) ACCEPT; }', + notarule => true, + } - @ferm::rule { 'dsa-bacula-sd-v4': - domain => '(ip)', - description => 'Allow bacula-sd access from director and clients', - rule => 'proto tcp mod state state (NEW) dport (bacula-sd) @subchain \'bacula-sd\' { saddr ($HOST_DEBIAN_V4) ACCEPT; }', - notarule => true, - } - - @ferm::rule { 'dsa-bacula-sd-v6': - domain => '(ip6)', - description => 'Allow bacula-sd access from director and clients', - rule => 'proto tcp mod state state (NEW) dport (bacula-sd) @subchain \'bacula-sd\' { saddr ($HOST_DEBIAN_V6) ACCEPT; }', - notarule => true, - } + @ferm::rule { 'dsa-bacula-sd-v6': + domain => '(ip6)', + description => 'Allow bacula-sd access from director and clients', + rule => 'proto tcp mod state state (NEW) dport (bacula-sd) @subchain \'bacula-sd\' { saddr ($HOST_DEBIAN_V6) ACCEPT; }', + notarule => true, + } }