@@ -52,13 +52,17 @@ utilizing common Puppet patterns.
52
52
this enables unique client settings- for instance, using different retain
53
53
settings for different hosts.
54
54
55
+ * ** Backup Point resource type for true Puppet style backup control.** Rather
56
+ than defining each backup point in the class file, the ` backup ` resource
57
+ allows backups to be defined next to the profiles that need it.
58
+
55
59
* ** Support for SSH without root access.** In most cases root login is not
56
60
available over ssh for security reasons, so this module relies instead on
57
- having it's own unique user with locked down sudo access to give it the needed
61
+ having it's own unique user with restricted sudo access to give it the needed
58
62
access to perform backups.
59
63
60
64
* ** Support for automatic key sharing.** The client machine will automatically
61
- receive the ssh key from the server that it is backing up to.
65
+ receive the ssh key from the server and user that it is backing up to.
62
66
63
67
* ** Locked down ssh accounts.** All ssh accounts are locked down. SSH keys can
64
68
only by used by the single backup host, without access to unneeded features
@@ -68,7 +72,7 @@ utilizing common Puppet patterns.
68
72
* ** Sender only rsync.** One of the biggest threats with rsync access is the
69
73
potential to overwrite existing files on the system to gain unauthorized
70
74
access. This module uses a wrapper script around rsync on the client side
71
- which essentially makes it read only.
75
+ to make it a read only user .
72
76
73
77
74
78
## Setup
@@ -122,6 +126,10 @@ class { 'rsnapshot::client':
122
126
}
123
127
```
124
128
129
+ That's it! A secure backup user will be created on the client, with the
130
+ appropriate user, ssh key, and permissions, and that machine will get it's
131
+ configuration pushed to the backup server.
132
+
125
133
126
134
## Usage
127
135
0 commit comments