modules/bacula/manifests/client.pp

   1 class bacula::client inherits bacula {
   2         @@bacula::storage-per-node { $::fqdn: }
   3
   4         if ! getfromhash($site::nodeinfo, 'not-bacula-client') {
   5                 @@bacula::node { $::fqdn: }
   6         }
   7
   8         package { ['bacula-fd']:
   9                 ensure => installed
  10         }
  11
  12         service { 'bacula-fd':
  13                 ensure    => running,
  14                 enable    => true,
  15                 hasstatus => true,
  16                 require   => Package['bacula-fd']
  17         }
  18
  19         exec { 'bacula-fd restart-when-idle':
  20                 path        => '/usr/bin:/usr/sbin:/bin:/sbin',
  21                 command     => 'sh -c "setsid /usr/local/sbin/bacula-idle-restart fd &"',
  22                 refreshonly => true,
  23                 subscribe   => [ File[$bacula_ssl_server_cert], File[$bacula_ssl_client_cert] ],
  24                 require     => File['/usr/local/sbin/bacula-idle-restart'],
  25         }
  26
  27         file { '/etc/bacula/bacula-fd.conf':
  28                 content => template('bacula/bacula-fd.conf.erb'),
  29                 mode    => '0640',
  30                 owner   => root,
  31                 group   => bacula,
  32                 require => Package['bacula-fd'],
  33                 notify  => Exec['bacula-fd restart-when-idle'],
  34         }
  35         file { '/usr/local/sbin/bacula-backup-dirs':
  36                 mode    => '0775',
  37                 source  => 'puppet:///modules/bacula/bacula-backup-dirs',
  38         }
  39         file { '/usr/local/sbin/postbaculajob':
  40                 mode    => '0775',
  41                 source  => 'puppet:///modules/bacula/postbaculajob',
  42         }
  43         file { '/etc/default/bacula-fd':
  44                 content => template('bacula/default.bacula-fd.erb'),
  45                 mode    => '0400',
  46                 owner   => root,
  47                 group   => root,
  48                 require => Package['bacula-fd'],
  49                 notify  => Service['bacula-fd'],
  50         }
  51         if $::lsbmajdistrelease != "testing" and $::lsbmajdistrelease < 7 {
  52                 file { '/etc/apt/preferences.d/dsa-bacula-client':
  53                         content => template('bacula/apt.preferences.bacula-client.erb'),
  54                         mode    => '0444',
  55                         owner   => root,
  56                         group   => root,
  57                 }
  58         } else {
  59                 file { '/etc/apt/preferences.d/dsa-bacula-client':
  60                         ensure => absent
  61                 }
  62         }
  63
  64         @ferm::rule { 'dsa-bacula-fd-v4':
  65                 domain      => '(ip)',
  66                 description => 'Allow bacula access from storage and director',
  67                 rule        => "proto tcp mod state state (NEW) dport (bacula-fd) saddr (${bacula_director_ip}) ACCEPT",
  68         }
  69
  70         #@ferm::rule { 'dsa-bacula-fd-v6':
  71         #       domain      => '(ip6)',
  72         #       description => 'Allow bacula access from storage and director',
  73         #       rule        => "proto tcp mod state state (NEW) dport (bacula-fd) saddr (${bacula_director_ip6}) ACCEPT",
  74         #}
  75 }