Defined Type: rsync::server::module

Defined in:
modules/rsync/manifests/server/module.pp

Overview

Definition: rsync::server::module

sets up a rsync server

Parameters:

$path            - path to data
$comment         - rsync comment
$read_only       - yes||no, defaults to yes
$write_only      - yes||no, defaults to no
$list            - yes||no, defaults to yes
$uid             - uid of rsync server, defaults to 0
$gid             - gid of rsync server, defaults to 0
$incoming_chmod  - incoming file mode, defaults to undef
$outgoing_chmod  - outgoing file mode, defaults to undef
$max_connections - maximum number of simultaneous connections allowed, defaults to 0
$lock_file       - file used to support the max connections parameter, defaults to /var/run/rsyncd.lock
 only needed if max_connections > 0
$secrets_file    - path to the file that contains the username:password pairs used for authenticating this module
$auth_users      - list of usernames that will be allowed to connect to this module (must be undef or an array)
$hosts_allow     - list of patterns allowed to connect to this module (man 5 rsyncd.conf for details, must be undef or an array)
$hosts_deny      - list of patterns allowed to connect to this module (man 5 rsyncd.conf for details, must be undef or an array)
$chroot          - chroot to the destination before starting the rsync.  enabled by default.
$auto_ferm       - If enabled and if $hosts_allow is set, generate a ferm service which restricts access to the allowed hosts
$auto_ferm_ipv6  - If auto_ferm is used and this option is enabled, ferm rules are also generated for ipv6

sets up an rsync server

Requires:

$path must be set

Sample Usage:

# setup default rsync repository
rsync::server::module { 'repo':
  path    => $base,
  require => File[$base],
}

Parameters:

  • path (Any)
  • ensure (Any) (defaults to: present)
  • comment (Any) (defaults to: undef)
  • read_only (Any) (defaults to: 'yes')
  • write_only (Any) (defaults to: 'no')
  • list (Any) (defaults to: 'yes')
  • uid (Any) (defaults to: '0')
  • gid (Any) (defaults to: '0')
  • incoming_chmod (Any) (defaults to: undef)
  • outgoing_chmod (Any) (defaults to: undef)
  • max_connections (Any) (defaults to: '0')
  • lock_file (Any) (defaults to: '/var/run/rsyncd.lock')
  • chroot (Any) (defaults to: true)
  • auto_ferm (Any) (defaults to: false)
  • auto_ferm_ipv6 (Any) (defaults to: false)
  • secrets_file (Any) (defaults to: undef)
  • auth_users (Any) (defaults to: undef)
  • hosts_allow (Optional[Variant[String,Array[String]]]) (defaults to: undef)
  • hosts_deny (Optional[Variant[String,Array[String]]]) (defaults to: undef) 


38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
 
# File 'modules/rsync/manifests/server/module.pp', line 38

define rsync::server::module (
  $path,
  $ensure                                              = present,
  $comment                                             = undef,
  $read_only                                           = 'yes',
  $write_only                                          = 'no',
  $list                                                = 'yes',
  $uid                                                 = '0',
  $gid                                                 = '0',
  $incoming_chmod                                      = undef,
  $outgoing_chmod                                      = undef,
  $max_connections                                     = '0',
  $lock_file                                           = '/var/run/rsyncd.lock',
  $chroot                                              = true,
  $auto_ferm                                           = false,
  $auto_ferm_ipv6                                      = false,
  $secrets_file                                        = undef,
  $auth_users                                          = undef,
  Optional[Variant[String,Array[String]]] $hosts_allow = undef,
  Optional[Variant[String,Array[String]]] $hosts_deny  = undef,
){
  include ::rsync::server

  if $hosts_allow {
    $hosts_allow_as_array = $hosts_allow ? {
      Array  => $hosts_allow,
      String => split($hosts_allow, /\s+/),
    }
    # To support stunnel, always accept from localhost.
    $frag_hosts_allow = ('localhost' in $hosts_allow_as_array) ? {
      false => $hosts_allow_as_array + 'localhost',
      true  => $hosts_allow_as_array,
    }
  }

  file { "${rsync::server::rsync_fragments}/frag-${name}":
    ensure  => $ensure,
    content => template('rsync/module.erb'),
    notify  => Exec['compile fragments'],
  }

  if $auto_ferm and $hosts_allow {
      $hosts_allow_ferm = join($hosts_allow, ' ')

      ferm::service { "rsyncd_access_${name}":
          ensure => $ensure,
          proto  => 'tcp',
          port   => 873,
          srange => "@resolve((${hosts_allow_ferm}))",
      }

      # rsync::server is always used with include semantics, so we must do this.
      if lookup('rsync::server::wrap_with_stunnel', {'default_value' => false}) {  # lint:ignore:wmf_styleguide
          ferm::service { "rsyncd_access_${name}_tls":
              ensure => $ensure,
              proto  => 'tcp',
              port   => 1873,
              srange => "@resolve((${hosts_allow_ferm}))",
          }
      }

      if $auto_ferm_ipv6 {
          ferm::service { "rsyncd_access_${name}_ipv6":
              ensure => $ensure,
              proto  => 'tcp',
              port   => 873,
              srange => "@resolve((${hosts_allow_ferm}),AAAA)",
          }
          # rsync::server is always used with include semantics, so we must do this.
          if lookup('rsync::server::wrap_with_stunnel', {'default_value' => false}) {  # lint:ignore:wmf_styleguide
              ferm::service { "rsyncd_access_${name}_ipv6_tls":
                  ensure => $ensure,
                  proto  => 'tcp',
                  port   => 1873,
                  srange => "@resolve((${hosts_allow_ferm}),AAAA)",
              }
          }
      }
  }
}