This daemon is responsible for ensuring secondary bastions are synced up to their primary at all times. If you don't have such HA setup, you can ignore this config file. For more information, refer to Clustering (High Availability).
These options configure the way the script logs its actions
Daemon setup options
These options configure whether the synchronization daemon is enabled
Remote synchronization options
These options configure how the primary bastion should push its configuration to the secondaries
Directory where the logs will be written to. Note that using this configuration option, the script will directly write to a file, without using syslog. If empty, won't log directly to a file.
The syslog facility to use for logging the script output. If set to the empty string, we'll not log through syslog at all. If this configuration option is missing from your config file altogether, the default value will be used (local6), which means that we'll log to syslog.
If set to anything else than
1, the daemon will refuse to start (e.g. you don't have secondary bastions). You can set this to
1 when you've configured and tested the primary/secondaries setup.
int > 0
The maximum delay, in seconds, after which we'll forcefully synchronize our data to the secondaries, even if no change was detected.
"ssh -q -i /root/.ssh/id_master2slave -o StrictHostKeyChecking=accept-new"
This value will be passed as the
--rsh parameter of
rsync (don't use
-p to specify the port here, use the
remotehostlist config below instead), this can be used to specify which SSH key to use, for example. NOTE THAT THIS OPTION IS MANDATORY (if you don't have anything to specify here, you can just say
ssh). If you followed the standard installation procedure, the "example" value specified below will work.
The remote user to connect as, using
ssh while rsyncing to secondaries. You probably don't need to change this.
space-separated list of strings, each string being either 'ip' or 'ip:port'
The list of the secondary bastions to push our data to. If this list is empty, the daemon won't do anything.