X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/d9ce053b71c151916fa8764b44a6058f827d3146..50aea11082eaa90bd37593b9c987d38a082f4e1b:/cookbooks/bind/recipes/default.rb?ds=sidebyside diff --git a/cookbooks/bind/recipes/default.rb b/cookbooks/bind/recipes/default.rb index aaba99781..39f0ba2fd 100644 --- a/cookbooks/bind/recipes/default.rb +++ b/cookbooks/bind/recipes/default.rb @@ -17,57 +17,46 @@ # limitations under the License. # -include_recipe "networking" - -ipv4_clients = [] -ipv6_clients = [] - package "bind9" -service "bind9" do +service "named" do action [:enable, :start] - supports :status => true, :restart => true, :reload => true end template "/etc/bind/named.conf.local" do source "named.local.erb" owner "root" group "root" - mode 0o644 - notifies :restart, "service[bind9]" + mode "644" + notifies :restart, "service[named]" end template "/etc/bind/named.conf.options" do source "named.options.erb" owner "root" group "root" - mode 0o644 - variables :ipv4_clients => ipv4_clients, :ipv6_clients => ipv6_clients - notifies :restart, "service[bind9]" + mode "644" + notifies :restart, "service[named]" end template "/etc/bind/db.10" do source "db.10.erb" owner "root" group "root" - mode 0o644 - notifies :reload, "service[bind9]" + mode "644" + notifies :reload, "service[named]" end firewall_rule "accept-dns-udp" do action :accept - source "net" - dest "fw" - proto "udp" + context :incoming + protocol :udp dest_ports "domain" - source_ports "-" end firewall_rule "accept-dns-tcp" do action :accept - source "net" - dest "fw" - proto "tcp:syn" + context :incoming + protocol :tcp dest_ports "domain" - source_ports "-" end