X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=modules%2Fbacula%2Fmanifests%2Fdirector.pp;h=f8c547939755b8d417034f4d4fed09512e4a35ec;hb=6662dcaaa84043c8ee2dfd89481fd503d4d8827e;hp=3bb019764887248114775d5740c3db601c896cbe;hpb=8fc104f1c82d84fb71ed3f3b5e8ac7708dea6d86;p=dsa-puppet.git

diff --git a/modules/bacula/manifests/director.pp b/modules/bacula/manifests/director.pp
index 3bb01976..f8c54793 100644
--- a/modules/bacula/manifests/director.pp
+++ b/modules/bacula/manifests/director.pp
@@ -1,37 +1,41 @@
 class bacula::director inherits bacula {
 
-  package {
-    "bacula-director-pgsql": ensure => installed;
-    "bacula-common": ensure => installed;
-    "bacula-common-pgsql": ensure => installed;
-  }
+	package { ['bacula-director-pgsql', 'bacula-common', 'bacula-common-pgsql']:
+		ensure => installed
+	}
 
-  service {
-    "bacula-director":
-      ensure => running,
-      enable => true,
-      hasstatus => true,
-      require => Package["bacula-director-pgsql"];
-  }
-  file {
-    "/etc/bacula/conf.d":
-      ensure  => directory,
-      mode => 755,
-      group => bacula,
-      notify  => Exec["bacula-director restart"]
-      ;
-    "/etc/bacula/bacula-dir.conf":
-      content => template("bacula/etc/bacula/bacula-dir.conf.erb"),
-      mode => 440,
-      group => bacula,
-      require => Package["bacula-director-pgsql"],
-      notify  => Exec["bacula-director restart"]
-      ;
-  }
+	service { 'bacula-director':
+		ensure    => running,
+		enable    => true,
+		hasstatus => true,
+		require   => Package['bacula-director-pgsql']
+	}
+
+	file { '/etc/bacula/conf.d':
+		ensure  => directory,
+		mode    => '0755',
+		group   => bacula,
+		purge   => true,
+		force   => true,
+		recurse => true,
+		source  => 'puppet:///files/empty/',
+		notify  => Service['bacula-director']
+	}
+
+	file { '/etc/bacula/bacula-dir.conf':
+		content => template('bacula/bacula-dir.conf.erb'),
+		mode    => '0440',
+		group   => bacula,
+		require => Package['bacula-director-pgsql'],
+		notify  => Service['bacula-director']
+	}
+
+	@ferm::rule { 'dsa-bacula-dir':
+		domain      => '(ip ip6)',
+		description => 'Allow bacula access from localhost',
+		rule        => "proto tcp mod state state (NEW) dport (bacula-dir) saddr (${bacula_director_address} localhost) ACCEPT",
+	}
+
+	Bacula::Node<<| |>>
 
-  exec {
-    "bacula-director restart":
-      path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
-      refreshonly => true;
-  }
 }