init

nodes/etc/rsyncd.conf

@@ -0,0 +1,8 @@
+[sfbs]
+path = /
+comment = "Full file-system share for sbfs"
+read only = true
+exclude = *.tar.old
+refuse options = delete
+auth users = @guset:deny, sfbs:ro
+secrets file = /var/lib/sfbs/rsync-auth

nodes/install.sh

@@ -0,0 +1,6 @@
+#!/bin/sh
+
+cp ./etc/rsyncd.conf /etc/rsyncd.conf
+[ -d "/var/lib/sfbs" ] || mkdir -p /var/lib/sfbs
+[ -f "/var/lib/sfbs/rsync-password" ] || openssl rand -hex 16 > /var/lib/sfbs/rsync-password
+[ -f "/var/lib/sfbs/rsync-auth" ] || (echo "sfbs:$(cat /var/lib/sfbs/rsync-password)" > /var/lib/sfbs/rsync-auth)