]> git.donarmstrong.com Git - dsa-puppet.git/blob - modules/bacula/manifests/client.pp
Split bacula_director_address into bacula_director_address and bacula_director_ip
[dsa-puppet.git] / modules / bacula / manifests / client.pp
1 class bacula::client inherits bacula {
2
3         package { ['bacula-fd']:
4                 ensure => installed
5         }
6
7         service { 'bacula-fd':
8                 ensure    => running,
9                 enable    => true,
10                 hasstatus => true,
11                 require   => Package['bacula-fd']
12         }
13
14         file {
15                 '/etc/bacula/bacula-fd.conf':
16                         content => template('bacula/bacula-fd.conf.erb'),
17                         mode    => '0640',
18                         owner   => root,
19                         group   => bacula,
20                         require => Package['bacula-fd'],
21                         notify  => Service['bacula-fd'],
22                         ;
23                 '/usr/local/sbin/postbaculajob':
24                         mode    => '0775',
25                         source  => 'puppet:///modules/bacula/postbaculajob',
26                         ;
27         }
28
29         @ferm::rule { 'dsa-bacula-fd-v4':
30                 domain      => '(ip)',
31                 description => 'Allow bacula access from storage and director',
32                 rule        => "proto tcp mod state state (NEW) dport (bacula-fd) saddr (${bacula_director_ip}) ACCEPT",
33         }
34
35         #@ferm::rule { 'dsa-bacula-fd-v6':
36         #       domain      => '(ip6)',
37         #       description => 'Allow bacula access from storage and director',
38         #       rule        => "proto tcp mod state state (NEW) dport (bacula-fd) saddr (${bacula_director_ip6}) ACCEPT",
39         #}
40 }