# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
-# http://www.apache.org/licenses/LICENSE-2.0
+# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
include_recipe "networking"
+hosts_allow = {}
+hosts_deny = {}
+
+node[:rsyncd][:modules].each do |name, details|
+ hosts_allow[name] = details[:hosts_allow] || []
+
+ if details[:nodes_allow]
+ hosts_allow[name] |= search(:node, details[:nodes_allow]).collect do |n|
+ n.ipaddresses(:role => :external)
+ end.flatten
+ end
+
+ hosts_deny[name] = details[:hosts_deny] || []
+
+ next unless details[:nodes_deny]
+
+ hosts_deny[name] |= search(:node, details[:nodes_deny]).collect do |n|
+ n.ipaddresses(:role => :external)
+ end.flatten
+end
+
package "rsync"
service "rsync" do
- action [ :enable, :start ]
+ action [:enable, :start]
supports :status => true, :restart => true
end
source "rsync.erb"
owner "root"
group "root"
- mode 0644
- notifies :restart, resources(:service => "rsync")
+ mode 0o644
+ notifies :restart, "service[rsync]"
end
template "/etc/rsyncd.conf" do
source "rsyncd.conf.erb"
owner "root"
group "root"
- mode 0644
+ mode 0o644
+ variables :hosts_allow => hosts_allow, :hosts_deny => hosts_deny
end
firewall_rule "accept-rsync" do