X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fpostgres%2Fmanifests%2Fbackup_server.pp;h=a4c6689db6b76fc743bbc740b0d99bc2bd94e42f;hb=a5118bb7ee4c0ed9c5cea3dcb2243738381467d6;hp=1f95f3eb8ecfc253c40003e7f6d28c442ccd5040;hpb=06b5ef2cf5af685b2e35f80bc108e0d5d21b0add;p=mirror%2Fdsa-puppet.git diff --git a/modules/postgres/manifests/backup_server.pp b/modules/postgres/manifests/backup_server.pp index 1f95f3eb8..a4c6689db 100644 --- a/modules/postgres/manifests/backup_server.pp +++ b/modules/postgres/manifests/backup_server.pp @@ -2,6 +2,8 @@ class postgres::backup_server { include postgres::backup_server::globals + $make_base_backups = '/usr/local/bin/postgres-make-base-backups' + ensure_packages ( [ 'libhash-merge-simple-perl', 'libyaml-perl', @@ -21,7 +23,7 @@ class postgres::backup_server { } Concat::Fragment <<| tag == $postgres::backup_server::globals::tag_base_backup |>> - file { $postgres::backup_server::globals::make_base_backups: + file { $make_base_backups: mode => '0555', content => template('postgres/backup_server/postgres-make-base-backups.erb'), } @@ -33,7 +35,7 @@ class postgres::backup_server { concat::fragment { 'puppet-crontab--postgres-make_base_backups': target => '/etc/cron.d/puppet-crontab', content => @("EOF") - */30 * * * * debbackup sleep $(( RANDOM \% 1200 )); chronic ${$postgres::backup_server::globals::make_base_backups} + */30 * * * * debbackup sleep $(( RANDOM \% 1200 )); chronic ${make_base_backups} | EOF } @@ -82,14 +84,14 @@ class postgres::backup_server { purge => true, force => true, recurse => true, - notify => Exec['update dsa-check-backuppg-manual.conf'], + notify => Exec['update dsa-check-backuppg.conf'], } - file { '/etc/dsa/postgresql-backup/dsa-check-backuppg.conf.d/manual.conf': - content => template('postgres/backup_server/dsa-check-backuppg-manual.conf.erb'), - notify => Exec['update dsa-check-backuppg-manual.conf'] + file { '/etc/dsa/postgresql-backup/dsa-check-backuppg.conf.d/globals.conf': + content => template('postgres/backup_server/dsa-check-backuppg-globals.conf.erb'), + notify => Exec['update dsa-check-backuppg.conf'] } File<<| tag == $postgres::backup_server::globals::tag_dsa_check_backupp |>> - exec { 'update dsa-check-backuppg-manual.conf': + exec { 'update dsa-check-backuppg.conf': command => @(EOF), perl -MYAML=LoadFile,Dump -MHash::Merge::Simple=merge -E 'say Dump(merge(map{LoadFile($_)}@ARGV))' /etc/dsa/postgresql-backup/dsa-check-backuppg.conf.d/*.conf > /etc/nagios/dsa-check-backuppg.conf | EOF @@ -97,6 +99,12 @@ class postgres::backup_server { refreshonly => true, } + file { '/etc/sudoers.d/backup-server': + mode => '0440', + content => template('postgres/backup_server/sudoers.erb'), + } + + #### # Maintain .pgpass file on backup servers # #