diff options
author | Micah Anderson <micah@riseup.net> | 2008-05-21 18:33:50 +0000 |
---|---|---|
committer | Micah Anderson <micah@riseup.net> | 2008-05-21 18:33:50 +0000 |
commit | ba5f41284e8b55bc2eb3c5c8c1dcad1844214e7a (patch) | |
tree | f381b0610d9b791ceb0404025f39a3f1184f9fce | |
parent | 2a8f279a9ff422a5da57946f368c852bdb37d2b5 (diff) | |
download | puppet-backupninja-ba5f41284e8b55bc2eb3c5c8c1dcad1844214e7a.tar.gz puppet-backupninja-ba5f41284e8b55bc2eb3c5c8c1dcad1844214e7a.tar.bz2 |
create a new backadmin ssh key
move backup keys into a 'backupkeys' directory
make a ninjareport directory to contain the pieces for ninjareport
move the backupninja::server definition for kakapo into site.pp, including the $backupdir definition
add a backupkeys piece to the backupninja::server module which should install the key
-rw-r--r-- | manifests/server.pp | 24 |
1 files changed, 23 insertions, 1 deletions
diff --git a/manifests/server.pp b/manifests/server.pp index 5a2fe09..10ff5a7 100644 --- a/manifests/server.pp +++ b/manifests/server.pp @@ -3,6 +3,10 @@ class backupninja::server { '' => "/backup", default => $backupdir_override, } + $backupkeys = $backupkeys_override ? { + '' => "$fileserver/keys/backupkeys", + default => $backupkeys_override, + } group { "backupninjas": ensure => "present", gid => 700 @@ -25,11 +29,29 @@ class backupninja::server { false => "${backupninja::server::backupdir}/$fqdn", default => $dir, } + $real_backupkeys = $backupkeys ? { + false => "${backupninja::server::backupkeys}", + default => $backupkeys, + } @@file { "$real_dir": - ensure => "directory", + ensure => directory, mode => 750, owner => $name, group => 0, tag => "backupninja-$real_host", } + @@file { "$real_dir/.ssh": + ensure => directory, + mode => 700, owner => $name, group => 0, + require => File["$real_dir"], + tag => "backupninja-$real_host", + } + @@file { "$real_dir/.ssh/authorized_keys": + ensure => present, + mode => 644, owner => 0, group => 0, + source => "$real_backupkeys/${name}_id_rsa.pub", + require => File["$real_dir/.ssh"], + tag => "backupninja-$real_host", + } + case $uid { false: { @@user { "$name": |