X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/45dde9418dd342bb1a632d82559201c0b3becf1a..5fde77fb90280da2c008bb5e8e83f6635b999715:/cookbooks/bind/recipes/default.rb?ds=sidebyside diff --git a/cookbooks/bind/recipes/default.rb b/cookbooks/bind/recipes/default.rb index 087ef5802..39f0ba2fd 100644 --- a/cookbooks/bind/recipes/default.rb +++ b/cookbooks/bind/recipes/default.rb @@ -17,64 +17,46 @@ # limitations under the License. # -include_recipe "networking" - -clients = search(:node, "roles:#{node[:bind][:clients]}") - -ipv4_clients = clients.collect do |client| - client.ipaddresses(:family => :inet) -end.flatten - -ipv6_clients = clients.collect do |client| - client.ipaddresses(:family => :inet6) -end.flatten - package "bind9" -service "bind9" do +service "named" do action [:enable, :start] - supports :status => true, :restart => true, :reload => true end template "/etc/bind/named.conf.local" do source "named.local.erb" owner "root" group "root" - mode 0o644 - notifies :restart, "service[bind9]" + mode "644" + notifies :restart, "service[named]" end template "/etc/bind/named.conf.options" do source "named.options.erb" owner "root" group "root" - mode 0o644 - variables :ipv4_clients => ipv4_clients, :ipv6_clients => ipv6_clients - notifies :restart, "service[bind9]" + mode "644" + notifies :restart, "service[named]" end template "/etc/bind/db.10" do source "db.10.erb" owner "root" group "root" - mode 0o644 - notifies :reload, "service[bind9]" + mode "644" + notifies :reload, "service[named]" end firewall_rule "accept-dns-udp" do action :accept - source "net" - dest "fw" - proto "udp" + context :incoming + protocol :udp dest_ports "domain" - source_ports "-" end firewall_rule "accept-dns-tcp" do action :accept - source "net" - dest "fw" - proto "tcp:syn" + context :incoming + protocol :tcp dest_ports "domain" - source_ports "-" end