]> git.openstreetmap.org Git - chef.git/blob - roles/backup.rb
Rename firewall tables to avoid any clash with iptables
[chef.git] / roles / backup.rb
1 name "backup"
2 description "Role applied to backup.openstreetmap.org"
3
4 default_attributes(
5   :rsyncd => {
6     :modules => {
7       :backup => {
8         :comment => "Backups",
9         :path => "/store/backup",
10         :read_only => false,
11         :write_only => true,
12         :list => false,
13         :uid => "osmbackup",
14         :gid => "osmbackup",
15         :transfer_logging => false,
16         :hosts_allow => [
17           "193.60.236.0/24",                     # ucl external
18           "10.0.48.0/20",                        # amsterdam internal
19           "130.117.76.0/27",                     # amsterdam external
20           "2001:978:2:2C::172:0/112",            # amsterdam external
21           "10.0.64.0/20",                        # dublin internal
22           "184.104.226.96/27",                   # dublin external
23           "2001:470:1:b3b::/64",                 # dublin external
24           "10.0.32.0/20",                        # bytemark internal
25           "89.16.162.16/28",                     # bytemark external
26           "2001:41c9:2:d6::/64",                 # bytemark external
27           "212.110.172.32",                      # shenron
28           "2001:41c9:1:400::32",                 # shenron
29           "140.211.167.99",                      # osuosl
30           "140.211.167.100",                     # osuosl
31           "2605:bc80:3010:700::8cd3:a763",       # osuosl
32           "2605:bc80:3010:700::8cd3:a764",       # osuosl
33           "127.0.0.0/8",                         # localhost
34           "::1"                                  # localhost
35         ]
36       }
37     }
38   }
39 )
40
41 run_list(
42   "recipe[rsyncd]",
43   "recipe[backup]"
44 )