X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;ds=sidebyside;f=modules%2Fbacula%2Fmanifests%2Fstorage.pp;h=2ac7e7d06f9be28ee14210bd5896bb4a9e0b40c7;hb=587e308d0dce6ad68e628aaeaa9dc0f2e3ffad01;hp=e6738672d67f902a6d4798539fb3bbb0498bf00b;hpb=6a6f323df04506d53a2d5fb8e30765ec216877d9;p=dsa-puppet.git diff --git a/modules/bacula/manifests/storage.pp b/modules/bacula/manifests/storage.pp index e6738672..2ac7e7d0 100644 --- a/modules/bacula/manifests/storage.pp +++ b/modules/bacula/manifests/storage.pp @@ -9,17 +9,38 @@ class bacula::storage inherits bacula { enable => true, hasstatus => true, } + + exec { 'bacula-sd restart-when-idle': + path => '/usr/bin:/usr/sbin:/bin:/sbin', + command => 'sh -c "setsid /usr/local/sbin/bacula-idle-restart sd &"', + refreshonly => true, + subscribe => File[$bacula_ssl_server_cert], + require => File['/usr/local/sbin/bacula-idle-restart'], + } + + file { '/etc/bacula/bacula-sd.conf': content => template('bacula/bacula-sd.conf.erb'), mode => '0640', group => bacula, - notify => Service['bacula-sd'] + notify => Exec['bacula-sd restart-when-idle'] + } + + file { '/etc/bacula/storage-conf.d': + ensure => directory, + mode => '0755', + group => bacula, + purge => true, + force => true, + recurse => true, + source => 'puppet:///files/empty/', + notify => Exec['bacula-sd restart-when-idle'] } @ferm::rule { 'dsa-bacula-sd-v4': domain => '(ip)', description => 'Allow bacula-sd access from director and clients', - rule => 'proto tcp mod state state (NEW) dport (bacula-sd) @subchain \'bacula-sd\' { saddr ($HOST_DEBIAN_V4) ACCEPT; }', + rule => 'proto tcp mod state state (NEW) dport (bacula-sd) @subchain \'bacula-sd\' { saddr ($HOST_DEBIAN_V4 5.153.231.125 5.153.231.126) ACCEPT; }', notarule => true, } @@ -29,4 +50,22 @@ class bacula::storage inherits bacula { rule => 'proto tcp mod state state (NEW) dport (bacula-sd) @subchain \'bacula-sd\' { saddr ($HOST_DEBIAN_V6) ACCEPT; }', notarule => true, } + + file { '/etc/bacula/storage-conf.d/empty.conf': + content => '', + mode => '0440', + group => bacula, + notify => Exec['bacula-sd restart-when-idle'] + } + + file { "${bacula_backup_path}/Catalog": + ensure => directory, + mode => '0755', + owner => bacula, + group => bacula, + ; + } + + Bacula::Storage-per-Node<<| |>> + }