Convert rancid from cvs to git, remove dnssec logs #193
Conversation
Also backup rancid config diffs to GitHub
| # at all, so they don't need to be compressed, there's just a lot of them | ||
| # since they are created once for every hour. | ||
| cron { 'clean-rancid-logs': | ||
| command => 'find /var/log/rancid/* -mtime +14 > /dev/null', |
There was a problem hiding this comment.
i like how i read this, thought "wtf use logrotate", then read your comment above and saw you pre-empted me :P
There was a problem hiding this comment.
Haha yeah, I tried logrotate first but couldn't find a good way to do that didn't involve adding a find command somewhere anyway. If we needed compression too I would have done that, but we just want a bit of cleanup here.
|
|
||
| # Don't push to GitHub for dev-* hosts to prevent duplicate backups with | ||
| # different commit hashes | ||
| if $::hostname !~ /^dev-/ { |
There was a problem hiding this comment.
we should really turn this into a global/hiera variable rather than repeating this dev- hostname junk everywhere
maybe a good starter ticket
There was a problem hiding this comment.
Good idea, I like the idea of making this a starter ticket because it wouldn't be too hard and would touch a few different parts of puppet, so that would be cool
These are the changes I've made to pestilence on stretch, it also backs up rancid config diffs to GitHub, which is pretty nice to have, especially since it strips the password (I didn't know it did that).
rancid-runalready attempts to push to a remote when it is run, so that part doesn't have to be added like it does in theocf_ldapmodule for GitHub backups.I removed the
/var/log/dnsseclog becausebind9wouldn't start without it and it didn't even seem to be logging anything, so I figured keeping it didn't make sense.