include_recipe "geoipupdate"
+servers = search(:node, "roles:geodns").collect(&:name).sort
+
+servers << "dummy.example.com" if servers.empty?
+
package %w[
gdnsd
]
owner "root"
group "root"
mode "644"
+ variables :servers => servers
notifies :restart, "service[gdnsd]"
end
standard_output "null"
private_tmp true
private_devices true
- protect_system "full"
+ protect_system "strict"
protect_home true
no_new_privileges true
end