X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/35392722739e0c288786f35b49d9c0799c86321f..ab2ede3f7ce07400d8183302431f85fe955e8bfb:/cookbooks/bind/recipes/default.rb diff --git a/cookbooks/bind/recipes/default.rb b/cookbooks/bind/recipes/default.rb index aa19e91e2..10ab7ce0b 100644 --- a/cookbooks/bind/recipes/default.rb +++ b/cookbooks/bind/recipes/default.rb @@ -31,13 +31,7 @@ end.flatten package "bind9" -service_name = if node[:lsb][:release].to_f < 20.04 - "bind9" - else - "named" - end - -service service_name do +service "named" do action [:enable, :start] end @@ -45,41 +39,37 @@ template "/etc/bind/named.conf.local" do source "named.local.erb" owner "root" group "root" - mode 0o644 - notifies :restart, "service[#{service_name}]" + mode "644" + notifies :restart, "service[named]" end template "/etc/bind/named.conf.options" do source "named.options.erb" owner "root" group "root" - mode 0o644 + mode "644" variables :ipv4_clients => ipv4_clients, :ipv6_clients => ipv6_clients - notifies :restart, "service[#{service_name}]" + notifies :restart, "service[named]" end template "/etc/bind/db.10" do source "db.10.erb" owner "root" group "root" - mode 0o644 - notifies :reload, "service[#{service_name}]" + mode "644" + notifies :reload, "service[named]" end firewall_rule "accept-dns-udp" do action :accept - source "net" - dest "fw" - proto "udp" + context :incoming + protocol :udp dest_ports "domain" - source_ports "-" end firewall_rule "accept-dns-tcp" do action :accept - source "net" - dest "fw" - proto "tcp:syn" + context :incoming + protocol :tcp dest_ports "domain" - source_ports "-" end