class bacula::client inherits bacula { package { ['bacula-client', 'bacula-fd']: ensure => installed } service { 'bacula-fd': ensure => running, enable => true, hasstatus => true, require => Package['bacula-fd'] } file { '/etc/bacula/bacula-fd.conf': content => template('bacula/bacula-fd.conf.erb'), mode => '0640', owner => root, group => bacula, require => Package['bacula-fd'], notify => Service['bacula-fd'] } @ferm::rule { 'dsa-bacula-fd-v4': domain => '(ip)', description => 'Allow bacula access from storage and director', rule => "proto tcp mod state state (NEW) dport (bacula-fd) saddr (${bacula_director_address}) ACCEPT", } @ferm::rule { 'dsa-bacula-fd-v6': domain => '(ip6)', description => 'Allow bacula access from storage and director', rule => "proto tcp mod state state (NEW) dport (bacula-fd) saddr (${bacula_director_address}) ACCEPT", } }