X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/a1fe1b73e197fcee92a684af0a62608067456159..7e52994e42d49a148ab9b1931d79e59f837af8a7:/cookbooks/exim/recipes/default.rb diff --git a/cookbooks/exim/recipes/default.rb b/cookbooks/exim/recipes/default.rb index 9266425e3..6234aa964 100644 --- a/cookbooks/exim/recipes/default.rb +++ b/cookbooks/exim/recipes/default.rb @@ -53,7 +53,7 @@ else key_file "/etc/ssl/private/exim.key" owner "root" group "ssl-cert" - mode 0o640 + mode "640" org "OpenStreetMap" email "postmaster@openstreetmap.org" common_name node[:fqdn] @@ -86,7 +86,7 @@ if node[:exim][:smarthost_name] directory "/srv/mta-sts.#{primary_domain}" do owner "root" group "root" - mode 0o755 + mode "755" end domains.each do |domain| @@ -94,7 +94,7 @@ if node[:exim][:smarthost_name] source "mta-sts.erb" owner "root" group "root" - mode 0o644 + mode "644" variables :domain => domain end end @@ -114,31 +114,38 @@ end file "/etc/exim4/blocked-senders" do owner "root" group "Debian-exim" - mode 0o644 + mode "644" end if node[:exim][:dkim_selectors] keys = data_bag_item("exim", "dkim") + template "/etc/exim4/dkim-domains" do + owner "root" + source "dkim-domains.erb" + group "Debian-exim" + mode "644" + end + template "/etc/exim4/dkim-selectors" do owner "root" source "dkim-selectors.erb" group "Debian-exim" - mode 0o644 + mode "644" end directory "/etc/exim4/dkim-keys" do owner "root" group "Debian-exim" - mode 0o755 + mode "755" end - node[:exim][:dkim_selectors].each do |domain, selector| + node[:exim][:dkim_selectors].each do |domain, _selector| file "/etc/exim4/dkim-keys/#{domain}" do content keys[domain].join("\n") owner "root" group "Debian-exim" - mode 0o640 + mode "640" end end end @@ -147,7 +154,7 @@ template "/etc/exim4/exim4.conf" do source "exim4.conf.erb" owner "root" group "Debian-exim" - mode 0o644 + mode "644" variables :relay_to_domains => relay_to_domains.sort, :relay_from_hosts => relay_from_hosts.sort notifies :restart, "service[exim4]" @@ -174,17 +181,17 @@ template "/etc/aliases" do source "aliases.erb" owner "root" group "root" - mode 0o644 + mode "644" end remote_directory "/etc/exim4/noreply" do source "noreply" owner "root" group "Debian-exim" - mode 0o755 + mode "755" files_owner "root" files_group "Debian-exim" - files_mode 0o755 + files_mode "755" purge true end