Hi Chris,

2010/11/10 Chris <[email protected]>

> [...]
> file{"/path/to/foo.key": source=>"puppet:///keys/foo.key"} , because
> any valid puppet client could access foo.key.
> [...]
>


you are not sticked to the puppet file server, you can also use something
like this:

file {
   "/path/to/file":
     source => "/nfs/$host/file";
}

Make an export for each connected server and restrict access to this one.
Put all private files on the NFS server and you're done.

Kind regards, Thomas

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to