roles/backup.rb

   1 name "backup"
   2 description "Role applied to backup.openstreetmap.org"
   3
   4 default_attributes(
   5   :rsyncd => {
   6     :modules => {
   7       :backup => {
   8         :comment => "Backups",
   9         :path => "/store/backup",
  10         :read_only => false,
  11         :write_only => true,
  12         :list => false,
  13         :uid => "osmbackup",
  14         :gid => "osmbackup",
  15         :transfer_logging => false,
  16         :hosts_allow => [
  17           "193.60.236.0/24",                     # ucl external
  18           "10.0.48.0/20",                        # amsterdam internal
  19           "184.104.179.128/27",                  # amsterdam external
  20           "2001:470:1:fa1::/64",                 # amsterdam external
  21           "10.0.64.0/20",                        # dublin internal
  22           "184.104.226.96/27",                   # dublin external
  23           "2001:470:1:b3b::/64",                 # dublin external
  24           "10.0.32.0/20",                        # bytemark internal
  25           "89.16.162.16/28",                     # bytemark external
  26           "2001:41c9:2:d6::/64",                 # bytemark external
  27           "212.110.172.32",                      # shenron
  28           "2001:41c9:1:400::32",                 # shenron
  29           "140.211.167.99",                      # osuosl
  30           "140.211.167.100",                     # osuosl
  31           "2605:bc80:3010:700::8cd3:a763",       # osuosl
  32           "2605:bc80:3010:700::8cd3:a764",       # osuosl
  33           "127.0.0.0/8",                         # localhost
  34           "::1"                                  # localhost
  35         ]
  36       },
  37       :logs => {
  38         :comment => "Log files",
  39         :path => "/store/logs",
  40         :read_only => false,
  41         :write_only => true,
  42         :list => false,
  43         :uid => "osmbackup",
  44         :gid => "osmbackup",
  45         :transfer_logging => false,
  46         :hosts_allow => [
  47           "193.60.236.0/24",          # ucl external
  48           "10.0.48.0/20",             # amsterdam internal
  49           "184.104.179.128/27",       # amsterdam external
  50           "2001:470:1:fa1::/64",      # amsterdam external
  51           "10.0.64.0/20",             # dublin internal
  52           "184.104.226.96/27",        # dublin external
  53           "2001:470:1:b3b::/64",      # dublin external
  54           "10.0.32.0/20",             # bytemark internal
  55           "89.16.162.16/28",          # bytemark external
  56           "2001:41c9:2:d6::/64",      # bytemark external
  57           "127.0.0.0/8",              # localhost
  58           "::1"                       # localhost
  59         ]
  60       }
  61     }
  62   }
  63 )
  64
  65 run_list(
  66   "recipe[rsyncd]",
  67   "recipe[backup]"
  68 )