]> git.openstreetmap.org Git - chef.git/blob - roles/backup.rb
Add new Amsterdam IPv6 addresses to ACLs
[chef.git] / roles / backup.rb
1 name "backup"
2 description "Role applied to backup.openstreetmap.org"
3
4 default_attributes(
5   :rsyncd => {
6     :modules => {
7       :backup => {
8         :comment => "Backups",
9         :path => "/store/backup",
10         :read_only => false,
11         :write_only => true,
12         :list => false,
13         :uid => "osmbackup",
14         :gid => "osmbackup",
15         :transfer_logging => false,
16         :hosts_allow => [
17           "193.60.236.0/24",                     # ucl external
18           "10.0.48.0/20",                        # amsterdam internal
19           "184.104.179.128/27",                  # amsterdam external (he.net)
20           "2001:470:1:fa1::/64",                 # amsterdam external (he.net)
21           "82.199.86.96/27",                     # amsterdam external (equinix)
22           "2001:4d78:500:5e3::/64",              # amsterdam external (equinix)
23           "10.0.64.0/20",                        # dublin internal
24           "184.104.226.96/27",                   # dublin external (he.net)
25           "2001:470:1:b3b::/64",                 # dublin external (he.net)
26           "87.252.214.96/27",                    # dublin external (equinix)
27           "2001:4d78:fe03:1c::/64",              # dublin external (equinix)
28           "10.0.32.0/20",                        # bytemark internal
29           "89.16.162.16/28",                     # bytemark external
30           "2001:41c9:2:d6::/64",                 # bytemark external
31           "212.110.172.32",                      # shenron
32           "2001:41c9:1:400::32",                 # shenron
33           "140.211.167.99",                      # osuosl
34           "140.211.167.100",                     # osuosl
35           "2605:bc80:3010:700::8cd3:a763",       # osuosl
36           "2605:bc80:3010:700::8cd3:a764",       # osuosl
37           "127.0.0.0/8",                         # localhost
38           "::1"                                  # localhost
39         ]
40       },
41       :logs => {
42         :comment => "Log files",
43         :path => "/store/logs",
44         :read_only => false,
45         :write_only => true,
46         :list => false,
47         :uid => "osmbackup",
48         :gid => "osmbackup",
49         :transfer_logging => false,
50         :hosts_allow => [
51           "193.60.236.0/24",          # ucl external
52           "10.0.48.0/20",             # amsterdam internal
53           "184.104.179.128/27",       # amsterdam external (he.net)
54           "2001:470:1:fa1::/64",      # amsterdam external (he.net)
55           "82.199.86.96/27",          # amsterdam external (equinix)
56           "2001:4d78:500:5e3::/64",   # amsterdam external (equinix)
57           "10.0.64.0/20",             # dublin internal
58           "184.104.226.96/27",        # dublin external (he.net)
59           "2001:470:1:b3b::/64",      # dublin external (he.net)
60           "87.252.214.96/27",         # dublin external (equinix)
61           "2001:4d78:fe03:1c::/64",   # dublin external (equinix)
62           "10.0.32.0/20",             # bytemark internal
63           "89.16.162.16/28",          # bytemark external
64           "2001:41c9:2:d6::/64",      # bytemark external
65           "127.0.0.0/8",              # localhost
66           "::1"                       # localhost
67         ]
68       }
69     }
70   }
71 )
72
73 run_list(
74   "recipe[rsyncd]",
75   "recipe[backup]"
76 )