class bacula::director inherits bacula { package { "bacula-director-pgsql": ensure => installed; "bacula-common": ensure => installed; "bacula-common-pgsql": ensure => installed; } service { "bacula-director": ensure => running, enable => true, hasstatus => true, require => Package["bacula-director-pgsql"]; } file { "/etc/bacula/conf.d": ensure => directory, mode => 755, group => bacula, purge => true notify => Exec["bacula-director restart"] ; "/etc/bacula/bacula-dir.conf": content => template("bacula/bacula-dir.conf.erb"), mode => 440, group => bacula, require => Package["bacula-director-pgsql"], notify => Exec["bacula-director restart"] ; } exec { "bacula-director restart": path => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin", refreshonly => true; } define bacula_client() { # These must be kept in sync with the settings in bacula.pp $bacula_client_name = "${name}-fd" $bacula_client_secret = hmac("/etc/puppet/secret", "bacula-fd-${name}") $client = $name file { "/etc/bacula/conf.d/${name}.conf": content => template("bacula/per-client.conf.erb"), mode => 440, group => bacula, notify => Exec["bacula-director restart"] ; } } # $allhosts = keys($site::allnodeinfo) $allhosts = [ "berlioz.debian.org" ] bacula_client { $allhosts: } @ferm::rule { 'dsa-bacula-dir': domain => '(ip ip6)', description => 'Allow bacula access from localhost', rule => "proto tcp mod state state (NEW) dport (bacula-dir) saddr ($bacula_director_address localhost) ACCEPT", } }