summaryrefslogtreecommitdiffstats
path: root/roles/common/templates/etc/bacula/bacula-fd.conf.j2
blob: d0af395012357d66ceb41b8907e04a8b9ec226fe (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
#
# Default  Bacula File Daemon Configuration file
#
# For Bacula release 9.6.7 (10 December 2020) -- debian bullseye/sid
#
# There is not much to change here except perhaps the
# File daemon Name to
#
#
# Copyright (C) 2000-2020 Kern Sibbald
# License: BSD 2-Clause; see file LICENSE-FOSS
#

#
# List Directors who are permitted to contact this File daemon
#
{% for dir in groups['bacula_dir'] | sort %}
Director {
  Name = {{ hostvars[dir].inventory_hostname_short }}-dir
  @|"sed -n '/^{{ hostvars[dir].inventory_hostname_short }}-dir\\s/ {s//Password = /p; q}' /etc/bacula/passwords-fd"
}

# Send all messages except skipped files back to Director
Messages {
  Name = Standard
  director = {{ hostvars[dir].inventory_hostname_short }}-dir = all, !skipped, !restored
}
{% endfor %}

#
# "Global" File daemon configuration specifications
#
FileDaemon {  # define myself
  Name = {{ inventory_hostname_short }}-fd
  Working Directory = /var/lib/bacula
  Pid Directory = /run/bacula
  Maximum Concurrent Jobs = 20
  FDAddress = {{ ipsec[inventory_hostname_short] }}
  FDPort = 9102
  SDConnectTimeout = 5 min

  PKI Signatures = Yes  # Enable Data Signing
  PKI Encryption = Yes  # Enable Data Encryption
  PKI Keypair = /etc/bacula/ssl/{{ inventory_hostname_short }}.pem # Public and Private Keys
  PKI Master Key = /etc/bacula/ssl/master.pem                      # ONLY the Public Key
}