X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fbacula%2Ftemplates%2Fbacula-sd.conf.erb;h=370c281501869cb82cc5eb51ecd151d2bfbf3c3d;hb=598ef097f4c8f6b50b61dde7fc4bd011e955b754;hp=0a0ef7998a925cdc8b604b5daa6c67e66efa2a03;hpb=5419a3761db7fb6dbf42a0097275f9723f7fa910;p=mirror%2Fdsa-puppet.git diff --git a/modules/bacula/templates/bacula-sd.conf.erb b/modules/bacula/templates/bacula-sd.conf.erb index 0a0ef7998..370c28150 100644 --- a/modules/bacula/templates/bacula-sd.conf.erb +++ b/modules/bacula/templates/bacula-sd.conf.erb @@ -34,34 +34,9 @@ Storage { TLS Enable = yes TLS Require = yes TLS Verify Peer = yes - TLS CA Certificate File = "<%= @bacula_ca_path %>" - # This is a server certificate, used for incoming connections. - TLS Certificate = "<%= @bacula_ssl_server_cert %>" - TLS Key = "<%= @bacula_ssl_server_key %>" -} - -# List Directors who are permitted to contact Storage daemon -# -Director { - Name = <%= @bacula_director_name %> - Password = "<%= @storage_secret %>" - - TLS Enable = yes - TLS Require = yes - TLS Verify Peer = yes - TLS Allowed CN = "clientcerts/<%= @bacula_director_address %>" - TLS CA Certificate File = "<%= @bacula_ca_path %>" - # This is a server certificate, used for incoming director connections. - TLS Certificate = "<%= @bacula_ssl_server_cert %>" - TLS Key = "<%= @bacula_ssl_server_key %>" -} - -# Send all messages to the Director, -# mount messages also are sent to the email address -# -Messages { - Name = Standard - director = <%= @bacula_director_name %> = all + <%= scope['bacula::bacula_tls_ca_certificate_file'] %> + <%= scope['bacula::bacula_tls_server_certificate'] %> + <%= scope['bacula::bacula_tls_server_key'] %> } @|"sh -c 'for f in /etc/bacula/storage-conf.d/*.conf ; do echo @${f} ; done'"