fripost-ansible/roles/bacula-sd, branch master Fripost ansible scripts typofix 2020-11-15T17:33:37+00:00 Guilhem Moulin guilhem@fripost.org 2020-11-05T17:13:45+00:00 4db299d6e2a5953c59906d4f1cb6841da34beb7c Regression from ead9aaa3dd7ca48012b2b21cc930ee73c8eaa9d3. 
Regression from ead9aaa3dd7ca48012b2b21cc930ee73c8eaa9d3.
Bacula: refactor systemd service files. 2020-11-03T02:37:11+00:00 Guilhem Moulin guilhem@fripost.org 2020-11-03T02:15:10+00:00 ead9aaa3dd7ca48012b2b21cc930ee73c8eaa9d3 Use unit overrides on top of upstream's service files instead of overriding entire service files. In particular, upstream uses flag `-P` so we don't need to use RuntimeDirectory= anymore. 
Use unit overrides on top of upstream's service files instead of
overriding entire service files.  In particular, upstream uses flag `-P`
so we don't need to use RuntimeDirectory= anymore.
bacula-{dir,sd}: Upgrade role to Debian Buster. 2020-05-26T19:26:45+00:00 Guilhem Moulin guilhem@fripost.org 2020-05-26T19:12:38+00:00 6450b2f48b57d92db102277448879a3a7c99d97b 






tr/-/_/ in group names.
2020-01-22T01:12:45+00:00

Guilhem Moulin
guilhem@fripost.org

2020-01-22T01:12:24+00:00

a092bfd947773281a23419ee0ab62358371b7166

This avoids

[DEPRECATION WARNING]: The TRANSFORM_INVALID_GROUP_CHARS settings is set
to allow bad characters in group names by default, this will change, but
still be user configurable on deprecation. This feature will be removed
in version 2.10. Deprecation warnings can be disabled by setting
deprecation_warnings=False in ansible.cfg.
[WARNING]: Invalid characters were found in group names but not
replaced, use -vvvv to see details





This avoids

[DEPRECATION WARNING]: The TRANSFORM_INVALID_GROUP_CHARS settings is set
to allow bad characters in group names by default, this will change, but
still be user configurable on deprecation. This feature will be removed
in version 2.10. Deprecation warnings can be disabled by setting
deprecation_warnings=False in ansible.cfg.
[WARNING]: Invalid characters were found in group names but not
replaced, use -vvvv to see details







bacula-sd: Ensure /mnt/backup is mounted before creating sub-directories.
2018-12-09T19:25:40+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-09T17:26:07+00:00

7403204208322ab2e46920a024e74700757c2665












systemd.service: Tighten hardening options.
2018-12-09T19:25:40+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-09T17:15:10+00:00

2147ff3bd9091b88960e2243b2d7d76d03cadc89












bacula-*.service: Don't fork in the background.
2018-12-09T19:25:39+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-09T17:12:39+00:00

2845af5f76ad3be9c0a1f69ab478ff5a08346a4c

Inspired from /lib/systemd/system/bacula-fd.service.





Inspired from /lib/systemd/system/bacula-fd.service.







systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’.
2018-12-09T19:25:39+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-08T00:06:06+00:00

6a57ea01fd48992883d6dac1b7746e79202215e4

And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’.





And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’.







/lib/systemd/system → /etc/systemd/system
2017-05-31T15:39:57+00:00

Guilhem Moulin
guilhem@fripost.org

2017-05-31T15:39:57+00:00

e136d3edbdb6749d4559939dc9fcbc11d166e34c












Tunnel bacula (dir → {fd,sd} and fd → sd) traffic through IPSec.
2016-05-22T15:53:58+00:00

Guilhem Moulin
guilhem@fripost.org

2016-05-22T15:21:16+00:00

8cf4032ecec5b9f58d829e89f231179170432539