]> git.openstreetmap.org Git - chef.git/blob - roles/backup.rb
Use internal address to check certificates on internal only machines
[chef.git] / roles / backup.rb
1 name "backup"
2 description "Role applied to backup.openstreetmap.org"
3
4 default_attributes(
5   :accounts => {
6     :users => {
7       :osmbackup => { :status => :role }
8     }
9   },
10   :rsyncd => {
11     :modules => {
12       :backup => {
13         :comment => "Backups",
14         :path => "/store/backup",
15         :read_only => false,
16         :write_only => true,
17         :list => false,
18         :uid => "osmbackup",
19         :gid => "osmbackup",
20         :transfer_logging => false,
21         :hosts_allow => [
22           "193.60.236.0/24",                     # ucl external
23           "10.0.48.0/20",                        # equinix internal
24           "130.117.76.0/27",                     # equinix external
25           "2001:978:2:2C::172:0/112",            # equinix external
26           "10.0.32.0/20",                        # bytemark internal
27           "89.16.162.16/28",                     # bytemark external
28           "2001:41c9:2:d6::/64",                 # bytemark external
29           "212.110.172.32",                      # shenron
30           "2001:41c9:1:400::32",                 # shenron
31           "140.211.167.104",                     # osuosl
32           "140.211.167.105",                     # osuosl
33           "2605:bc80:3010:700::8cde:a768",       # osuosl
34           "2605:bc80:3010:700::8cde:a769",       # osuosl
35           "127.0.0.0/8",                         # localhost
36           "::1"                                  # localhost
37         ]
38       }
39     }
40   }
41 )
42
43 run_list(
44   "recipe[rsyncd]",
45   "recipe[backup]"
46 )