ensure => directory,
mode => 755,
group => bacula,
+ purge => true,
notify => Exec["bacula-director restart"]
;
"/etc/bacula/bacula-dir.conf":
# These must be kept in sync with the settings in bacula.pp
$bacula_client_name = "${name}-fd"
$bacula_client_secret = hmac("/etc/puppet/secret", "bacula-fd-${name}")
+ $client = $name
file {
"/etc/bacula/conf.d/${name}.conf":
;
}
}
- $allhosts = keys($site::allnodeinfo)
-
+# $allhosts = keys($site::allnodeinfo)
+ $allhosts = [ "berlioz.debian.org", "biber.debian.org" ]
bacula_client { $allhosts: }
+
+ @ferm::rule { 'dsa-bacula-dir':
+ domain => '(ip ip6)',
+ description => 'Allow bacula access from localhost',
+ rule => "proto tcp mod state state (NEW) dport (bacula-dir) saddr ($bacula_director_address localhost) ACCEPT",
+ }
+
}