Director and File Daemon on Different Hosts
Let’s consider “darkstar-dir” director at “darkstar.example.com” and the “arrakis-fd” file daemon on “arrakis.example.com”.
In bacula-dir.conf::
Client { Name = arrakis-fd Address = arrakis.example.com FD Port = 9112 Catalog = MyCatalog Password = "password" AutoPrune = no Maximum Concurrent Jobs = 4 TLS Enable = yes TLS Require = yes TLS CA Certificate File = /usr/local/bacula/etc/ssl/certs/root_cert.pem TLS Certificate = /usr/local/bacula/etc/ssl/certs/darkstar_cert.pem TLS Key = /usr/local/bacula/etc/ssl/keys/darkstar_key.pem }In bacula-fd.conf:
Director { Name = darkstar-dir Password = "password" TLS Enable = yes TLS Require = yes TLS Require = yes TLS Verify Peer = yes TLS Allowed CN = arrakis.example.com TLS CA Certificate File = /usr/local/bacula/etc/ssl/certs/root_cert.pem TLS Certificate = /usr/local/bacula/etc/ssl/certs/arrakis_cert.pem TLS Key = /usr/local/bacula/etc/ssl/keys/arrakis_key.pem }
Go back to: Enable TLS Communications Encryption between Director and File Daemon.