Puppet BareOS File Daemon config

bareos.yaml

---

classes:
  - bareos
  - bareos::client::client
  - bareos::storage::storage

bareos::repo_release: '17.2'

bareos::client::client::name_client: $FILEDAEMON
bareos::client::client::tls_enable: true
bareos::client::client::tls_ca_certificate_file: /etc/bareos/ssl/ca.crt
bareos::client::client::tls_certificate: /etc/bareos/ssl/%{::fqdn}.crt
bareos::client::client::tls_key: /etc/bareos/ssl/%{::fqdn}.key
bareos::client::client::tls_allowed_cn:
  - $STORAGEDAEMON

resources:
  bareos::client::director:
    $DIRECTORDAEMON:
      address: $DIRECTORDAEMON
      tls_enable: true
      tls_ca_certificate_file: /etc/bareos/ssl/ca.crt
      tls_certificate: /etc/bareos/ssl/%{::fqdn}.crt
      tls_key: /etc/bareos/ssl/%{::fqdn}.key
      tls_allowed_cn:
        - $DIRECTORDAEMON
  bareos::client::messages:
    Standard:
      description: 'Send relevant messages to the Director.'
      director: '$DIRECTORDAEMON = all, !skipped, !restored'
    $DIRECTORDAEMON:
      mail_on_error:
        - $MAILADDRESS = all, !skipped, !terminate

bareos_ssl.yaml

---

resources:
  file:
    /etc/bareos/ssl/:
      ensure: directory
      owner: bareos
      group: bareos
    /etc/bareos/ssl/ca.crt:
      owner: bareos
      group: bareos
      content: $CA
    /etc/bareos/ssl/%{::fqdn}.crt:
      owner: bareos
      group: bareos
      content: $OWN_CRT
    /etc/bareos/ssl/%{::fqdn}.key:
      owner: bareos
      group: bareos
      content: $OWN_KEY

---

Last update: April 13, 2020