include_recipe "networking"
+hosts_allow = Hash.new
+hosts_deny = Hash.new
+
+node[:rsyncd][:modules].each do |name,details|
+ hosts_allow[name] = details[:hosts_allow] || []
+
+ if details[:nodes_allow]
+ hosts_allow[name] |= search(:node, details[:nodes_allow]).collect do |n|
+ n.ipaddresses(:role => :external)
+ end.flatten
+ end
+
+ hosts_deny[name] = details[:hosts_deny] || []
+
+ if details[:nodes_deny]
+ hosts_deny[name] |= search(:node, details[:nodes_deny]).collect do |n|
+ n.ipaddresses(:role => :external)
+ end.flatten
+ end
+end
+
package "rsync"
service "rsync" do
owner "root"
group "root"
mode 0644
+ variables :hosts_allow => hosts_allow, :hosts_deny => hosts_deny
end
firewall_rule "accept-rsync" do
<% if details[:refuse_options] -%>
refuse options = <%= details[:refuse_options].join(" ") %>
<% end -%>
-<% if details[:hosts_allow] -%>
- hosts allow = <%= details[:hosts_allow].join(",") %>
+<% unless @hosts_allow[name].empty? -%>
+ hosts allow = <%= @hosts_allow[name].join(",") %>
<% end -%>
-<% if details[:hosts_deny] -%>
- hosts deny = <%= details[:hosts_deny].join(",") %>
+<% unless @hosts_deny[name].empty? -%>
+ hosts deny = <%= @hosts_deny[name].join(",") %>
<% end -%>
dont compress = *.gz *.tgz *.zip *.z *.rpm *.deb *.iso *.bz2 *.tbz *.7z
<% end -%>
"2001:630:12:500::/64", # ic external
"127.0.0.0/8", # localhost
"::1" # localhost
- ]
+ ],
+ :nodes_allow => "roles:tilecache"
}
}
}