X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fpostgres%2Fmanifests%2Fbackup_server.pp;h=bf8efa04210dd3411f76dcd154d085e2c9d56aaa;hb=c585c8dce34bcb0f057d871566d17179911586c0;hp=6d49144931b287b9a41801d11fde6de72f922495;hpb=dc2858047a151e2fbe466678c21d6533a5c245bf;p=mirror%2Fdsa-puppet.git diff --git a/modules/postgres/manifests/backup_server.pp b/modules/postgres/manifests/backup_server.pp index 6d4914493..bf8efa042 100644 --- a/modules/postgres/manifests/backup_server.pp +++ b/modules/postgres/manifests/backup_server.pp @@ -44,16 +44,14 @@ class postgres::backup_server { # # do not let other hosts directly build our authorized_keys file, # instead go via a script that somewhat validates intput - file { '/usr/local/bin/postgres-make-backup-sshauthkeys': - ensure => absent, + file { '/usr/local/bin/debbackup-ssh-wrap': + source => 'puppet:///modules/postgres/backup_server/debbackup-ssh-wrap', + mode => '0555' } file { '/usr/local/bin/postgres-make-one-base-backup': source => 'puppet:///modules/postgres/backup_server/postgres-make-one-base-backup', mode => '0555' } - file { "/etc/ssh/userkeys/${postgres::backup_server::globals::backup_unix_user}": - content => template('postgres/backup_server/sshkeys-manual.erb'), - } ssh::authorized_key_collect { 'postgres::backup_server': target_user => $postgres::backup_server::globals::backup_unix_user, collect_tag => $postgres::backup_server::globals::tag_source_sshkey,