geodns: Add extra rsync geodns allow list IPs

[chef.git] / roles / geodns.rb

diff --git a/roles/geodns.rb b/roles/geodns.rb
index 0d151071032ede0780c2ac69ba285d8a9ce9b0c9..a1df0153233badae3c3e4c7a23d101eb1c6848e1 100644 (file)
--- a/roles/geodns.rb
+++ b/roles/geodns.rb
@@ -1,6 +1,28 @@
 name "geodns"
 description "Role applied to all geographic DNS servers"
 
+default_attributes(
+  :rsyncd => {
+    :modules => {
+      :geodns => {
+        :comment => "GeoDNS",
+        :path => "/etc/gdnsd/config.d",
+        :read_only => false,
+        :write_only => true,
+        :list => false,
+        :transfer_logging => false,
+        :hosts_allow => [
+          "184.104.226.102",  # idris HE
+          "2001:470:1:b3b::6", # idris HE
+          "87.252.214.102", # idris Equinix
+          "2001:4d78:fe03:1c::6" # idris  Equinix
+        ]
+      }
+    }
+  }
+)
+
 run_list(
+  "recipe[rsyncd]",
   "recipe[geodns]"
 )