From 2c98db46d913527bc8df135f1720698e1002a920 Mon Sep 17 00:00:00 2001 From: Julien Cristau Date: Mon, 23 Sep 2019 13:50:37 +0200 Subject: [PATCH 1/1] bacula cluster moved to postgresql-manda-01 --- modules/ferm/manifests/per_host.pp | 24 +++++++++++++----------- 1 file changed, 13 insertions(+), 11 deletions(-) diff --git a/modules/ferm/manifests/per_host.pp b/modules/ferm/manifests/per_host.pp index 10b99f8c9..ed818f12d 100644 --- a/modules/ferm/manifests/per_host.pp +++ b/modules/ferm/manifests/per_host.pp @@ -146,17 +146,6 @@ class ferm::per_host { )) | EOF } - ferm::rule { 'dsa-postgres-bacula': - description => 'Allow postgress access to cluster: bacula', - domain => '(ip ip6)', - rule => @("EOF"/$) - &SERVICE_RANGE(tcp, 5437, ( - ${ join(getfromhash($deprecated::allnodeinfo, 'dinis.debian.org', 'ipHostNumber'), " ") } - ${ join(getfromhash($deprecated::allnodeinfo, 'storace.debian.org', 'ipHostNumber'), " ") } - \$HOST_PGBACKUPHOST - )) - | EOF - } ferm::rule { 'dsa-postgres-dedup': description => 'Allow postgress access to cluster: dedup', domain => '(ip ip6)', @@ -217,6 +206,19 @@ class ferm::per_host { | EOF } } + postgresql-manda-01: { + ferm::rule { 'dsa-postgres-bacula': + description => 'Allow postgress access to cluster: bacula', + domain => '(ip ip6)', + rule => @("EOF"/$) + &SERVICE_RANGE(tcp, 5432, ( + ${ join(getfromhash($deprecated::allnodeinfo, 'dinis.debian.org', 'ipHostNumber'), " ") } + ${ join(getfromhash($deprecated::allnodeinfo, 'storace.debian.org', 'ipHostNumber'), " ") } + \$HOST_PGBACKUPHOST + )) + | EOF + } + } seger: { ferm::rule { 'dsa-postgres-backup': description => 'Allow postgress access', -- 2.20.1