mirror/dsa-puppet.git
5 years agoeximconf: add an alternative SMTP router for "single domain" domains
Adam D. Barratt [Thu, 26 Sep 2019 17:04:12 +0000 (18:04 +0100)]
eximconf: add an alternative SMTP router for "single domain" domains

These are domains that only allow a single recipient domain per SMTP
connection, in order to allow simple differentiation of filtering
options.

Signed-off-by: Adam D. Barratt <adam@adam-barratt.org.uk>
5 years agofix a class name
Peter Palfrader [Sat, 28 Sep 2019 18:59:17 +0000 (20:59 +0200)]
fix a class name

5 years agoReplace debbackup with parameterized username in most places
Peter Palfrader [Sat, 28 Sep 2019 18:58:10 +0000 (20:58 +0200)]
Replace debbackup with parameterized username in most places

5 years agocleanup
Peter Palfrader [Sat, 28 Sep 2019 18:50:49 +0000 (20:50 +0200)]
cleanup

5 years agoTry something else to get a default for postgres::backup_cluster::db_backup_role
Peter Palfrader [Sat, 28 Sep 2019 18:48:16 +0000 (20:48 +0200)]
Try something else to get a default for postgres::backup_cluster::db_backup_role

5 years agowhitespace
Peter Palfrader [Sat, 28 Sep 2019 18:44:46 +0000 (20:44 +0200)]
whitespace

5 years agoMove backup role name to hiera
Peter Palfrader [Sat, 28 Sep 2019 18:30:27 +0000 (20:30 +0200)]
Move backup role name to hiera

5 years agoMove pg-receive-file-from-backup to postgres module
Peter Palfrader [Sat, 28 Sep 2019 18:28:32 +0000 (20:28 +0200)]
Move pg-receive-file-from-backup to postgres module

5 years agofix paths
Peter Palfrader [Sat, 28 Sep 2019 18:27:20 +0000 (20:27 +0200)]
fix paths

5 years agopg-backup-file.conf.erb: Remove obsolete special casing
Peter Palfrader [Sat, 28 Sep 2019 18:26:39 +0000 (20:26 +0200)]
pg-backup-file.conf.erb: Remove obsolete special casing

5 years agoMove files for pg-backup-file from roles to postgres module
Peter Palfrader [Sat, 28 Sep 2019 18:25:07 +0000 (20:25 +0200)]
Move files for pg-backup-file from roles to postgres module

5 years agoMove backup-server specific sudoers entries out of debian-global sudo
Peter Palfrader [Sat, 28 Sep 2019 18:20:37 +0000 (20:20 +0200)]
Move backup-server specific sudoers entries out of debian-global sudo

5 years agoMove $make_base_backups to postgres::backup_server as it is local there; make some...
Peter Palfrader [Sat, 28 Sep 2019 18:14:21 +0000 (20:14 +0200)]
Move $make_base_backups to postgres::backup_server as it is local there; make some strings in postgres::backup_server::globals parameters

5 years agosibelius and chopin no longer run relevant pg instances or even exist
Peter Palfrader [Sat, 28 Sep 2019 17:59:51 +0000 (19:59 +0200)]
sibelius and chopin no longer run relevant pg instances or even exist

5 years agorename dsa-check-backuppg-manual.conf
Peter Palfrader [Sat, 28 Sep 2019 17:58:53 +0000 (19:58 +0200)]
rename dsa-check-backuppg-manual.conf

5 years agomigrate away from old postgres_backup_server role
Peter Palfrader [Sat, 28 Sep 2019 17:53:19 +0000 (19:53 +0200)]
migrate away from old postgres_backup_server role

5 years agonote why lw07 and snapshotdb-manda-01 are still in postgresql_server in data/common...
Peter Palfrader [Sat, 28 Sep 2019 17:47:59 +0000 (19:47 +0200)]
note why lw07 and snapshotdb-manda-01 are still in postgresql_server in data/common.yaml

5 years agoFix crontab entry
Peter Palfrader [Sat, 28 Sep 2019 17:40:43 +0000 (19:40 +0200)]
Fix crontab entry

5 years agopg cluster facter: port is an integer
Peter Palfrader [Sat, 28 Sep 2019 17:37:20 +0000 (19:37 +0200)]
pg cluster facter: port is an integer

5 years agoTypes for params of postgres::backup_cluster
Peter Palfrader [Sat, 28 Sep 2019 17:35:38 +0000 (19:35 +0200)]
Types for params of postgres::backup_cluster

5 years agomodules/postgres/manifests: quoting, spacing, linting
Peter Palfrader [Sat, 28 Sep 2019 17:31:37 +0000 (19:31 +0200)]
modules/postgres/manifests: quoting, spacing, linting

5 years agoMove list of clusters to make a base backup of from the script to a conffile
Peter Palfrader [Sat, 28 Sep 2019 17:28:56 +0000 (19:28 +0200)]
Move list of clusters to make a base backup of from the script to a conffile

5 years agoAnd add sallinen to roles::postgresql::server
Peter Palfrader [Sat, 28 Sep 2019 17:12:23 +0000 (19:12 +0200)]
And add sallinen to roles::postgresql::server

5 years agoswitch sallinen to modern pg backup config fu
Peter Palfrader [Sat, 28 Sep 2019 17:07:18 +0000 (19:07 +0200)]
switch sallinen to modern pg backup config fu

5 years agoswitch bmdb1 to modern pg backup config fu
Peter Palfrader [Sat, 28 Sep 2019 17:04:18 +0000 (19:04 +0200)]
switch bmdb1 to modern pg backup config fu

5 years agoRemove buxtehude from old-style pg role
Peter Palfrader [Sat, 28 Sep 2019 16:51:52 +0000 (18:51 +0200)]
Remove buxtehude from old-style pg role

5 years agoswitch seger to modern pg backup config fu
Peter Palfrader [Sat, 28 Sep 2019 16:50:39 +0000 (18:50 +0200)]
switch seger to modern pg backup config fu

5 years agoRemove fasolo from old-style pg role
Peter Palfrader [Sat, 28 Sep 2019 16:49:38 +0000 (18:49 +0200)]
Remove fasolo from old-style pg role

5 years agodanzi should not be listed in the manual sections of pg backup files
Peter Palfrader [Sat, 28 Sep 2019 16:48:01 +0000 (18:48 +0200)]
danzi should not be listed in the manual sections of pg backup files

5 years agoremove explicit ferm allow from the pgbackup hosts to fasolo
Peter Palfrader [Sat, 28 Sep 2019 16:40:29 +0000 (18:40 +0200)]
remove explicit ferm allow from the pgbackup hosts to fasolo

5 years agomove fasolo pg backup away from manual listing things
Peter Palfrader [Sat, 28 Sep 2019 16:36:49 +0000 (18:36 +0200)]
move fasolo pg backup away from manual listing things

5 years agoadd danzi hiera file
Peter Palfrader [Sat, 28 Sep 2019 16:35:50 +0000 (18:35 +0200)]
add danzi hiera file

5 years agoStop special casing godard in postgres::backup_source
Peter Palfrader [Sat, 28 Sep 2019 16:32:46 +0000 (18:32 +0200)]
Stop special casing godard in postgres::backup_source

5 years agoMove the backup of the pg instance on danzi to a more hiera and facter based setup
Peter Palfrader [Sat, 28 Sep 2019 16:29:42 +0000 (18:29 +0200)]
Move the backup of the pg instance on danzi to a more hiera and facter based setup

5 years agoMove the backup of the pg instance on postgresql-manda-01 to a more hiera and facter...
Peter Palfrader [Sat, 28 Sep 2019 16:28:16 +0000 (18:28 +0200)]
Move the backup of the pg instance on postgresql-manda-01 to a more hiera and facter based setup

5 years agoClass instance names need to encode version and clustername, not just hostname, to...
Peter Palfrader [Sat, 28 Sep 2019 16:26:43 +0000 (18:26 +0200)]
Class instance names need to encode version and clustername, not just hostname, to work on hosts with more than one cluster

5 years agoMove the backup of the pg instance on buxtehude to a more hiera and facter based...
Peter Palfrader [Sat, 28 Sep 2019 16:23:48 +0000 (18:23 +0200)]
Move the backup of the pg instance on buxtehude to a more hiera and facter based setup

5 years agoMove the backup of the pg instance on vittoria to a more hiera and facter based setup
Peter Palfrader [Sat, 28 Sep 2019 16:22:23 +0000 (18:22 +0200)]
Move the backup of the pg instance on vittoria to a more hiera and facter based setup

5 years agoMove the backup of the pg instance of melartin to a more hiera and facter based setup
Peter Palfrader [Sat, 28 Sep 2019 16:19:35 +0000 (18:19 +0200)]
Move the backup of the pg instance of melartin to a more hiera and facter based setup

5 years agowhitespace/quoting: postgres::backup_source
Peter Palfrader [Sat, 28 Sep 2019 15:58:09 +0000 (17:58 +0200)]
whitespace/quoting: postgres::backup_source

5 years agoadd a pg cluster list facter
Peter Palfrader [Sat, 28 Sep 2019 14:41:47 +0000 (16:41 +0200)]
add a pg cluster list facter

5 years agodrop old jerea volumes at bm
Peter Palfrader [Sat, 28 Sep 2019 13:03:22 +0000 (15:03 +0200)]
drop old jerea volumes at bm

5 years agodrop old mekeel volumes at bm
Peter Palfrader [Sat, 28 Sep 2019 12:36:43 +0000 (14:36 +0200)]
drop old mekeel volumes at bm

5 years agorename BM rainier and rapoport volumes to OLD-
Aurelien Jarno [Sat, 28 Sep 2019 11:50:58 +0000 (13:50 +0200)]
rename BM rainier and rapoport volumes to OLD-

5 years agoDrop the dedup cluster at bytemark
Aurelien Jarno [Sat, 28 Sep 2019 11:46:26 +0000 (13:46 +0200)]
Drop the dedup cluster at bytemark

5 years agorename BM delfin volumes to OLD-
Aurelien Jarno [Sat, 28 Sep 2019 11:22:31 +0000 (13:22 +0200)]
rename BM delfin volumes to OLD-

5 years agoautofs: delfin at ubc
Aurelien Jarno [Sat, 28 Sep 2019 11:15:28 +0000 (13:15 +0200)]
autofs: delfin at ubc

5 years agorename BM pejacevic volumes to OLD-
Aurelien Jarno [Sat, 28 Sep 2019 11:12:38 +0000 (13:12 +0200)]
rename BM pejacevic volumes to OLD-

5 years agoadd multipath volumes for delfin at ubc
Aurelien Jarno [Sat, 28 Sep 2019 10:46:56 +0000 (12:46 +0200)]
add multipath volumes for delfin at ubc

5 years agoDrop HOST_PGBACKUPHOST_V4 and HOST_PGBACKUPHOST_V6
Aurelien Jarno [Sat, 28 Sep 2019 09:31:57 +0000 (11:31 +0200)]
Drop HOST_PGBACKUPHOST_V4 and HOST_PGBACKUPHOST_V6

5 years agoferm@serger: merge dsa-postgres-backup and dsa-postgres-backup6
Aurelien Jarno [Sat, 28 Sep 2019 09:27:19 +0000 (11:27 +0200)]
ferm@serger: merge dsa-postgres-backup and dsa-postgres-backup6

5 years agoDrop HOST_DEBIAN_V4 and HOST_DEBIAN_V6
Aurelien Jarno [Sat, 28 Sep 2019 09:21:28 +0000 (11:21 +0200)]
Drop HOST_DEBIAN_V4 and HOST_DEBIAN_V6

5 years agoGet pubsub nodes from puppetdb
Peter Palfrader [Sat, 28 Sep 2019 08:23:26 +0000 (10:23 +0200)]
Get pubsub nodes from puppetdb

5 years agoUse export/collect to get the intra-cluster firewall opened for pubsub
Peter Palfrader [Sat, 28 Sep 2019 07:41:15 +0000 (09:41 +0200)]
Use export/collect to get the intra-cluster firewall opened for pubsub

5 years agowhitespace/quoting: pubsub
Peter Palfrader [Sat, 28 Sep 2019 07:39:52 +0000 (09:39 +0200)]
whitespace/quoting: pubsub

5 years agopubsub: do not hardcode IPs
Aurelien Jarno [Fri, 27 Sep 2019 22:57:34 +0000 (00:57 +0200)]
pubsub: do not hardcode IPs

5 years agostunnel: merge IPv4 and IPv6 rules in a single rule
Aurelien Jarno [Fri, 27 Sep 2019 22:32:19 +0000 (00:32 +0200)]
stunnel: merge IPv4 and IPv6 rules in a single rule

5 years agoautofs: pejacevic at ubc
Julien Cristau [Fri, 27 Sep 2019 18:35:51 +0000 (20:35 +0200)]
autofs: pejacevic at ubc

5 years agopubsub: merge IPv4 and IPv6 rules in a single rule
Aurelien Jarno [Fri, 27 Sep 2019 22:27:38 +0000 (00:27 +0200)]
pubsub: merge IPv4 and IPv6 rules in a single rule

5 years agoferm: do not open PG to backup hosts for clusters defined in backup_source
Aurelien Jarno [Fri, 27 Sep 2019 22:04:53 +0000 (00:04 +0200)]
ferm: do not open PG to backup hosts for clusters defined in backup_source

5 years agoCorrectly add tracker and wanna-build backups @ danzi
Aurelien Jarno [Fri, 27 Sep 2019 21:56:45 +0000 (23:56 +0200)]
Correctly add tracker and wanna-build backups @ danzi

5 years agopg@danzi: use a list of hosts instead of whitelisting the whole subnet
Aurelien Jarno [Fri, 27 Sep 2019 21:46:23 +0000 (23:46 +0200)]
pg@danzi: use a list of hosts instead of whitelisting the whole subnet

5 years agoadd multipath volumes for pejacevic at ubc
Julien Cristau [Fri, 27 Sep 2019 18:34:37 +0000 (20:34 +0200)]
add multipath volumes for pejacevic at ubc

5 years agoFix typo in volume name
Julien Cristau [Fri, 27 Sep 2019 09:36:20 +0000 (11:36 +0200)]
Fix typo in volume name

5 years agomove appstream.debian.org static component to static-master-ubc-01 from dillon, since...
Peter Palfrader [Fri, 27 Sep 2019 07:03:49 +0000 (09:03 +0200)]
move appstream.debian.org static component to static-master-ubc-01 from dillon, since the source (mekeel) moved from bm to ubc

5 years agomekeel now gets the UBC autofs config
Peter Palfrader [Fri, 27 Sep 2019 06:33:08 +0000 (08:33 +0200)]
mekeel now gets the UBC autofs config

5 years agorename BM mekeel volumes to OLD-
Peter Palfrader [Fri, 27 Sep 2019 06:32:26 +0000 (08:32 +0200)]
rename BM mekeel volumes to OLD-

5 years agoAdd volumes for mekeel
Peter Palfrader [Fri, 27 Sep 2019 05:58:05 +0000 (07:58 +0200)]
Add volumes for mekeel

5 years agoexim: fix syntax error in exim_surbl.pl
Julien Cristau [Thu, 26 Sep 2019 12:57:22 +0000 (14:57 +0200)]
exim: fix syntax error in exim_surbl.pl

5 years agoexim: remove debconf hosts from debianhosts
Julien Cristau [Thu, 26 Sep 2019 12:36:57 +0000 (14:36 +0200)]
exim: remove debconf hosts from debianhosts

debconf.org email goes through the debian MXs now.

5 years agoMerge branch 'fordsa' of https://git.adam-barratt.org.uk/git/mirror/dsa-puppet
Julien Cristau [Thu, 26 Sep 2019 12:14:16 +0000 (14:14 +0200)]
Merge branch 'fordsa' of https://git.adam-barratt.org.uk/git/mirror/dsa-puppet

5 years agoFix package name
Peter Palfrader [Thu, 26 Sep 2019 07:38:09 +0000 (09:38 +0200)]
Fix package name

5 years agoAnd remove the file on or after 10.2
Peter Palfrader [Thu, 26 Sep 2019 07:35:38 +0000 (09:35 +0200)]
And remove the file on or after 10.2

5 years agoIgnore local package trapperkeeper-webserver-jetty9-clojure on puppetmaster, cf....
Peter Palfrader [Thu, 26 Sep 2019 07:34:59 +0000 (09:34 +0200)]
Ignore local package trapperkeeper-webserver-jetty9-clojure on puppetmaster, cf. Debian#924005, Debian#930562

5 years agoremove non-standard From header from Bacula emails
Peter Palfrader [Wed, 25 Sep 2019 20:28:07 +0000 (22:28 +0200)]
remove non-standard From header from Bacula emails

re Debian#935886, by anarcat

5 years agosimplify email_error default logic
Peter Palfrader [Wed, 25 Sep 2019 20:27:38 +0000 (22:27 +0200)]
simplify email_error default logic

(by anarcat)

5 years agoFix bacula email logic
Peter Palfrader [Wed, 25 Sep 2019 17:01:35 +0000 (19:01 +0200)]
Fix bacula email logic

5 years agoRevert "Since the conditional does not work for default values for params, fall back...
Peter Palfrader [Wed, 25 Sep 2019 17:01:00 +0000 (19:01 +0200)]
Revert "Since the conditional does not work for default values for params, fall back to sane defaults in code"

This reverts commit 75ce99c03293e2df071bcbb7f56694d192652586.

5 years agoSince the conditional does not work for default values for params, fall back to sane...
Peter Palfrader [Wed, 25 Sep 2019 16:52:36 +0000 (18:52 +0200)]
Since the conditional does not work for default values for params, fall back to sane defaults in code

5 years agoset email_error until we figure out how to fix it properly
Peter Palfrader [Wed, 25 Sep 2019 16:44:00 +0000 (18:44 +0200)]
set email_error until we figure out how to fix it properly

5 years agoOnly realize the director-from-client config if the director-from-client-via-storage...
Peter Palfrader [Wed, 25 Sep 2019 16:37:11 +0000 (18:37 +0200)]
Only realize the director-from-client config if the director-from-client-via-storage config is already there

5 years agoSplit up mail roles
Peter Palfrader [Wed, 25 Sep 2019 16:21:30 +0000 (18:21 +0200)]
Split up mail roles

5 years agoTry to wait for both network-online *and* unbound
Peter Palfrader [Wed, 25 Sep 2019 14:54:18 +0000 (16:54 +0200)]
Try to wait for both network-online *and* unbound

5 years agodefaults for db_address, db_port; move dbsslmode = verify-ca into the case where...
Peter Palfrader [Wed, 25 Sep 2019 12:57:31 +0000 (14:57 +0200)]
defaults for db_address, db_port; move dbsslmode = verify-ca into the case where we have a dbsslca

5 years agoList non-optional params first
Peter Palfrader [Wed, 25 Sep 2019 12:21:32 +0000 (14:21 +0200)]
List non-optional params first

5 years agoMove bacula::bacula_ssl_{server,client}_{cert,key} to hiera
Peter Palfrader [Wed, 25 Sep 2019 12:20:25 +0000 (14:20 +0200)]
Move bacula::bacula_ssl_{server,client}_{cert,key} to hiera

5 years agoMove bacula::bacula_ssl_ca_path to hiera
Peter Palfrader [Wed, 25 Sep 2019 12:09:45 +0000 (14:09 +0200)]
Move bacula::bacula_ssl_ca_path to hiera

5 years agos/bacula_ca_path/bacula_ssl_ca_path/
Peter Palfrader [Wed, 25 Sep 2019 12:01:48 +0000 (14:01 +0200)]
s/bacula_ca_path/bacula_ssl_ca_path/

5 years agoMove operator_email to hiera
Peter Palfrader [Wed, 25 Sep 2019 11:59:57 +0000 (13:59 +0200)]
Move operator_email to hiera

5 years agobacula_dsa_client_list and tag_bacula_dsa_client_list are not parameters
Peter Palfrader [Wed, 25 Sep 2019 11:58:01 +0000 (13:58 +0200)]
bacula_dsa_client_list and tag_bacula_dsa_client_list are not parameters

5 years agoDocument ferm::rule::simple
Peter Palfrader [Wed, 25 Sep 2019 11:41:15 +0000 (13:41 +0200)]
Document ferm::rule::simple

5 years agodsa_systemd::override: cleanup and make sure removal cleans the dir also
Peter Palfrader [Wed, 25 Sep 2019 11:05:06 +0000 (13:05 +0200)]
dsa_systemd::override: cleanup and make sure removal cleans the dir also

5 years agoMake rentention periods configurable with hiera, per client
Peter Palfrader [Wed, 25 Sep 2019 09:50:42 +0000 (11:50 +0200)]
Make rentention periods configurable with hiera, per client

5 years agoGlobally enable Heartbeat Interval
Peter Palfrader [Wed, 25 Sep 2019 09:40:05 +0000 (11:40 +0200)]
Globally enable Heartbeat Interval

5 years agoRemove defaults
Peter Palfrader [Wed, 25 Sep 2019 09:33:50 +0000 (11:33 +0200)]
Remove defaults

5 years agoUnify name of the Messages Resource
Peter Palfrader [Wed, 25 Sep 2019 09:31:24 +0000 (11:31 +0200)]
Unify name of the Messages Resource

5 years agoTry after unbound.service instead of network-online.target
Peter Palfrader [Wed, 25 Sep 2019 09:20:39 +0000 (11:20 +0200)]
Try after unbound.service instead of network-online.target

Doing the after network-online.target was not sufficient.

: Config error: Cannot add hostname(adayevskaya.debian.org) and port(9102) to addrlist (Cannot resolve hostname(adayevskaya.debian.org) Temporary failure in name resolution)
:             : line 23, col 5 of file /etc/bacula/bacula-fd.conf
:     }

5 years agoAll our systems are now at least Debian 9
Peter Palfrader [Wed, 25 Sep 2019 09:19:18 +0000 (11:19 +0200)]
All our systems are now at least Debian 9

5 years agosd and fd look up hostnames, so start them only after the network is online -a
Peter Palfrader [Wed, 25 Sep 2019 09:18:11 +0000 (11:18 +0200)]
sd and fd look up hostnames, so start them only after the network is online -a

5 years agoUse a variable that still exists to define the listen hostname
Peter Palfrader [Wed, 25 Sep 2019 09:13:14 +0000 (11:13 +0200)]
Use a variable that still exists to define the listen hostname