1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
|
class role::file_store (
Optional[Hash] $nfs_mounts = {},
Optional[String] $mountpoint = "/fichiers1",
) {
include "base_installation"
include "profile::fstab"
include "profile::tools"
include "profile::monitoring"
include "profile::wireguard"
unless empty($mountpoint) {
class { "::nfs":
server_enabled => true,
nfs_v4 => true,
nfs_v4_export_root => '/exports',
nfs_v4_export_root_clients => 'localhost(rw)',
require => Mount[$mountpoint],
}
$nfs_mounts.each |$nfs_mount, $hosts| {
file { "$mountpoint/$nfs_mount":
ensure => "directory",
mode => "0755",
owner => "nobody",
group => "nobody",
require => Mount[$mountpoint],
}
$hosts.each |$host_cn| {
$host = find_host($facts["ldapvar"]["other"], $host_cn)
if empty($host) {
fail("No host found for nfs")
} elsif has_key($host["vars"], "wireguard_ip") {
$clients = sprintf("%s%s",
join($host["vars"]["wireguard_ip"], "(rw,secure,sync,all_squash) "),
"(rw,secure,sync,all_squash)")
nfs::server::export { "$mountpoint/$nfs_mount":
owner => "nobody",
group => "nobody",
ensure => "present",
clients => $clients,
}
} elsif has_key($host["vars"], "host") {
nfs::server::export { "$mountpoint/$nfs_mount":
owner => "nobody",
group => "nobody",
ensure => "present",
clients => "${host[vars][host][0]}(rw,secure,sync,all_squash)",
}
} else {
nfs::server::export { "$mountpoint/$nfs_mount":
owner => "nobody",
group => "nobody",
ensure => "present",
clients => "${host[vars][real_hostname][0]}(rw,secure,sync,all_squash)",
}
}
}
}
}
}
|
