X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/269b5b28ccf95dd4b96cac3f51168ea3280c83db..a9355fbcbd863167b1c3cac6bcd2ff80008609a6:/cookbooks/dns/recipes/default.rb diff --git a/cookbooks/dns/recipes/default.rb b/cookbooks/dns/recipes/default.rb index 6bf913cb3..0d5944d4b 100644 --- a/cookbooks/dns/recipes/default.rb +++ b/cookbooks/dns/recipes/default.rb @@ -17,8 +17,9 @@ # limitations under the License. # -include_recipe "git" +include_recipe "accounts" include_recipe "apache" +include_recipe "git" geoservers = search(:node, "roles:geodns").collect(&:name).sort @@ -29,35 +30,37 @@ package %w[ parallel rsync perl + libdigest-sha-perl + libjson-xs-perl + libwww-perl libxml-treebuilder-perl libxml-writer-perl - libyaml-perl - libwww-perl - libjson-xs-perl + libyaml-libyaml-perl + lockfile-progs ] -# remote_file "/usr/local/bin/dnscontrol" do -# action :create -# source "https://github.com/StackExchange/dnscontrol/releases/download/v2.10.0/dnscontrol-Linux" -# owner "root" -# group "root" -# mode 0o755 -# end +remote_file "/usr/local/bin/dnscontrol" do + action :create + source "https://github.com/StackExchange/dnscontrol/releases/download/v3.18.1/dnscontrol-Linux" + owner "root" + group "root" + mode "755" +end directory "/srv/dns.openstreetmap.org" do owner "root" group "root" - mode 0o755 + mode "755" end remote_directory "/srv/dns.openstreetmap.org/html" do source "html" owner "root" group "root" - mode 0o755 + mode "755" files_owner "root" files_group "root" - files_mode 0o644 + files_mode "644" end zones = [] @@ -69,7 +72,7 @@ Dir.glob("/var/lib/dns/json/*.json").each do |kmlfile| source "zone.html.erb" owner "root" group "root" - mode 0o644 + mode "644" variables :zone => zone end @@ -80,7 +83,7 @@ template "/srv/dns.openstreetmap.org/html/index.html" do source "index.html.erb" owner "root" group "root" - mode 0o644 + mode "644" variables :zones => zones end @@ -99,17 +102,10 @@ template "/usr/local/bin/dns-update" do source "dns-update.erb" owner "root" group "git" - mode 0o750 + mode "750" variables :passwords => passwords, :geoservers => geoservers end -cookbook_file "/usr/local/bin/dns-update-sshfp" do - source "dns-update-sshfp" - owner "git" - group "git" - mode 0o750 -end - execute "dns-update" do action :nothing command "/usr/local/bin/dns-update" @@ -120,7 +116,7 @@ end directory "/var/lib/dns" do owner "git" group "git" - mode 0o2775 + mode "2775" notifies :run, "execute[dns-update]" end @@ -128,36 +124,38 @@ template "/var/lib/dns/creds.json" do source "creds.json.erb" owner "git" group "git" - mode 0o440 + mode "440" variables :passwords => passwords end -execute "dns-update-sshfp" do - action :nothing - command "/usr/local/bin/dns-update-sshfp" - user "git" +template "/var/lib/dns/include/geo.js" do + source "geo.js.erb" + owner "git" group "git" - subscribes :run, "template[/etc/ssh/ssh_known_hosts]" + mode "440" + variables :geoservers => geoservers + only_if { ::Dir.exist?("/var/lib/dns/include") } end cookbook_file "#{node[:dns][:repository]}/hooks/post-receive" do source "post-receive" owner "git" group "git" - mode 0o750 + mode "750" + only_if { ::Dir.exist?("#{node[:dns][:repository]}/hooks") } end template "/usr/local/bin/dns-check" do source "dns-check.erb" owner "root" group "git" - mode 0o750 + mode "750" variables :passwords => passwords, :geoservers => geoservers end -template "/etc/cron.d/dns" do - source "cron.erb" - owner "root" - group "root" - mode 0o644 +cron_d "dns" do + minute "*/3" + user "git" + command "/usr/local/bin/dns-check" + mailto "admins@openstreetmap.org" end