Attempt to prevent logs from containing passwords

Author: smortex

templates/bacula-dir-client.epp

@@ -14,7 +14,7 @@ Client {
     Address        = <%= $address %>
     FDPort         = <%= $port %>
     Catalog        = MyCatalog
-    Password       = "<%= $password %>"
+    Password       = "<%= Sensitive($password) %>"
     File Retention = <%= $file_retention %>
     Job Retention  = <%= $job_retention %>
     AutoPrune      = <%= bacula::yesno2str($autoprune) %>

templates/bacula-dir-header.epp

@@ -9,7 +9,7 @@ Director {                # define myself
     WorkingDirectory        = <%= $bacula::director::homedir %>
     Pid Directory           = <%= $bacula::director::rundir %>
     Maximum Concurrent Jobs = <%= $bacula::director::max_concurrent_jobs %>
-    Password                = "<%= $bacula::director::password %>"  # Console password
+    Password                = "<%= Sensitive($bacula::director::password) %>"  # Console password
     Messages                = Daemon
 <%= epp('bacula/_tls_server.epp') %>
 }
@@ -19,7 +19,7 @@ Catalog {
     Name   = MyCatalog
     dbname = "<%= $bacula::director::db_name %>";
     dbuser = "<%= $bacula::director::db_user %>";
-    dbpassword = "<%= $bacula::director::db_pw %>";
+    dbpassword = "<%= Sensitive($bacula::director::db_pw) %>";
 <% if $bacula::director::db_address { -%>
     DB Address = <%= $bacula::director::db_address %>
 <% } -%>

templates/bacula-dir-storage.epp

@@ -13,7 +13,7 @@ Storage {
     Name       = <%= $name %>-sd
     Address    = <%= $address %>
     SDPort     = <%= $port %>
-    Password   = "<%= $password %>"
+    Password   = "<%= Sensitive($password) %>"
     Device     = <%= $device_name %>
     Media Type = <%= $media_type %>
     Maximum Concurrent Jobs = <%= $max_concurrent_jobs %>

templates/bacula-fd-header.epp

@@ -1,12 +1,12 @@
 Director {
     Name     = <%= $bacula::client::director_name %>-dir
-    Password = "<%= $bacula::client::password %>"
+    Password = "<%= Sensitive($bacula::client::password) %>"
 <%= epp('bacula/_tls_server.epp') -%>
 }
 
 Director {
     Name     = <%= $bacula::client::director_name %>-mon
-    Password = "<%= $bacula::client::password %>"
+    Password = "<%= Sensitive($bacula::client::password) %>"
     Monitor  = yes
 <%= epp('bacula/_tls_server.epp') -%>
 }

templates/bacula-sd-dir.epp

@@ -1,7 +1,7 @@
 # Permit the Director to contact this SD
 Director {
     Name                    = <%= $bacula::storage::director_name %>-dir
-    Password                = "<%= $bacula::storage::password %>"
+    Password                = "<%= Sensitive($bacula::storage::password) %>"
 <%= epp('bacula/_tls_server.epp') %>
 }