X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/65e6abb07c5af84f4ab23c76321dc202d3ce5947..cac6ace6749429cdc77d0f1c0bac4890838d0861:/cookbooks/geodns/recipes/default.rb diff --git a/cookbooks/geodns/recipes/default.rb b/cookbooks/geodns/recipes/default.rb index 9f7c100c5..f017fb124 100644 --- a/cookbooks/geodns/recipes/default.rb +++ b/cookbooks/geodns/recipes/default.rb @@ -1,8 +1,8 @@ # -# Cookbook Name:: geodns +# Cookbook:: geodns # Recipe:: default # -# Copyright 2011, OpenStreetMap Foundation +# Copyright:: 2011, OpenStreetMap Foundation # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. @@ -17,24 +17,31 @@ # limitations under the License. # +include_recipe "geoipupdate" + package %w[ - geoipupdate gdnsd ] -execute "geoipdate" do - command "geoipupdate" - user "root" - group "root" - not_if { ::File.exist?("/var/lib/GeoIP/GeoLite2-Country.mmdb") } -end - directory "/etc/gdnsd/config.d" do owner "nobody" group "nogroup" mode 0o755 end +%w[tile nominatim].each do |zone| + %w[map resource weighted].each do |type| + template "/etc/gdnsd/config.d/#{zone}.#{type}" do + action :create_if_missing + source "zone.#{type}.erb" + owner "nobody" + group "nogroup" + mode 0o644 + variables :zone => zone + end + end +end + template "/etc/gdnsd/config" do source "config.erb" owner "root" @@ -56,6 +63,29 @@ service "gdnsd" do supports :status => true, :restart => true, :reload => true end +systemd_service "gdnsd-reload" do + description "Reload gdnsd configuration" + type "simple" + user "root" + exec_start "/bin/systemctl reload-or-restart gdnsd" + standard_output "null" + private_tmp true + private_devices true + protect_system "full" + protect_home true + no_new_privileges true +end + +systemd_path "gdnsd-reload" do + description "Reload gdnsd configuration" + path_changed "/etc/gdnsd/config.d" +end + +service "gdnsd-reload.path" do + action [:enable, :start] + subscribes :restart, "systemd_path[gdnsd-reload]" +end + firewall_rule "accept-dns-udp" do action :accept source "net"