#
-# Cookbook Name:: dns
+# Cookbook:: dns
# Recipe:: default
#
-# Copyright 2011, OpenStreetMap Foundation
+# Copyright:: 2011, OpenStreetMap Foundation
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
include_recipe "git"
include_recipe "apache"
+geoservers = search(:node, "roles:geodns").collect(&:name).sort
+
passwords = data_bag_item("dns", "passwords")
package %w[
make
+ parallel
+ rsync
perl
libxml-treebuilder-perl
libxml-writer-perl
libyaml-perl
libwww-perl
libjson-xs-perl
+ sshfp
]
+remote_file "/usr/local/bin/dnscontrol" do
+ action :create
+ source "https://github.com/StackExchange/dnscontrol/releases/download/v3.0.0/dnscontrol-Linux"
+ owner "root"
+ group "root"
+ mode 0o755
+end
+
directory "/srv/dns.openstreetmap.org" do
owner "root"
group "root"
owner "root"
group "git"
mode 0o750
- variables :passwords => passwords
+ variables :passwords => passwords, :geoservers => geoservers
end
execute "dns-update" do
notifies :run, "execute[dns-update]"
end
+template "/var/lib/dns/creds.json" do
+ source "creds.json.erb"
+ owner "git"
+ group "git"
+ mode 0o440
+ variables :passwords => passwords
+end
+
cookbook_file "#{node[:dns][:repository]}/hooks/post-receive" do
source "post-receive"
owner "git"
owner "root"
group "git"
mode 0o750
- variables :passwords => passwords
+ variables :passwords => passwords, :geoservers => geoservers
end
template "/etc/cron.d/dns" do