#
-# Cookbook Name:: geodns
+# Cookbook:: geodns
# Recipe:: default
#
-# Copyright 2011, OpenStreetMap Foundation
+# Copyright:: 2011, OpenStreetMap Foundation
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# limitations under the License.
#
+include_recipe "geoipupdate"
+
+servers = search(:node, "roles:geodns").collect(&:name).sort
+
package %w[
- geoipupdate
gdnsd
]
-execute "geoipdate" do
- command "geoipupdate"
- user "root"
- group "root"
- not_if { ::File.exist?("/var/lib/GeoIP/GeoLite2-Country.mmdb") }
+directory "/etc/gdnsd/config.d" do
+ owner "nobody"
+ group "nogroup"
+ mode "755"
+end
+
+%w[nominatim].each do |zone|
+ %w[map resource weighted].each do |type|
+ template "/etc/gdnsd/config.d/#{zone}.#{type}" do
+ action :create_if_missing
+ source "zone.#{type}.erb"
+ owner "nobody"
+ group "nogroup"
+ mode "644"
+ variables :zone => zone
+ end
+ end
end
template "/etc/gdnsd/config" do
source "config.erb"
owner "root"
group "root"
- mode 0o644
+ mode "644"
notifies :restart, "service[gdnsd]"
end
source "geo.erb"
owner "root"
group "root"
- mode 0o644
+ mode "644"
+ variables :servers => servers
notifies :restart, "service[gdnsd]"
end
supports :status => true, :restart => true, :reload => true
end
+systemd_service "gdnsd-reload" do
+ description "Reload gdnsd configuration"
+ type "simple"
+ user "root"
+ exec_start "/bin/systemctl reload-or-restart gdnsd"
+ standard_output "null"
+ private_tmp true
+ private_devices true
+ protect_system "full"
+ protect_home true
+ no_new_privileges true
+end
+
+systemd_path "gdnsd-reload" do
+ description "Reload gdnsd configuration"
+ path_changed "/etc/gdnsd/config.d"
+end
+
+service "gdnsd-reload.path" do
+ action [:enable, :start]
+ subscribes :restart, "systemd_path[gdnsd-reload]"
+end
+
firewall_rule "accept-dns-udp" do
action :accept
source "net"