X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/e3d8ec9fce647a447d0099144759137ebff8cdcb..aeaa46f3071de018b5c5e0f5678cb5b4082e3ddc:/cookbooks/exim/recipes/default.rb diff --git a/cookbooks/exim/recipes/default.rb b/cookbooks/exim/recipes/default.rb index 11865f6b6..2e8e0f642 100644 --- a/cookbooks/exim/recipes/default.rb +++ b/cookbooks/exim/recipes/default.rb @@ -53,7 +53,7 @@ else key_file "/etc/ssl/private/exim.key" owner "root" group "ssl-cert" - mode 0o640 + mode "640" org "OpenStreetMap" email "postmaster@openstreetmap.org" common_name node[:fqdn] @@ -86,7 +86,7 @@ if node[:exim][:smarthost_name] directory "/srv/mta-sts.#{primary_domain}" do owner "root" group "root" - mode 0o755 + mode "755" end domains.each do |domain| @@ -94,7 +94,7 @@ if node[:exim][:smarthost_name] source "mta-sts.erb" owner "root" group "root" - mode 0o644 + mode "644" variables :domain => domain end end @@ -114,23 +114,30 @@ end file "/etc/exim4/blocked-senders" do owner "root" group "Debian-exim" - mode 0o644 + mode "644" end if node[:exim][:dkim_selectors] keys = data_bag_item("exim", "dkim") + template "/etc/exim4/dkim-domains" do + owner "root" + source "dkim-domains.erb" + group "Debian-exim" + mode "644" + end + template "/etc/exim4/dkim-selectors" do owner "root" source "dkim-selectors.erb" group "Debian-exim" - mode 0o644 + mode "644" end directory "/etc/exim4/dkim-keys" do owner "root" group "Debian-exim" - mode 0o755 + mode "755" end node[:exim][:dkim_selectors].each do |domain, _selector| @@ -138,7 +145,7 @@ if node[:exim][:dkim_selectors] content keys[domain].join("\n") owner "root" group "Debian-exim" - mode 0o640 + mode "640" end end end @@ -147,7 +154,7 @@ template "/etc/exim4/exim4.conf" do source "exim4.conf.erb" owner "root" group "Debian-exim" - mode 0o644 + mode "644" variables :relay_to_domains => relay_to_domains.sort, :relay_from_hosts => relay_from_hosts.sort notifies :restart, "service[exim4]" @@ -174,14 +181,14 @@ template "/etc/aliases" do source "aliases.erb" owner "root" group "root" - mode 0o644 + mode "644" end remote_directory "/etc/exim4/noreply" do source "noreply" owner "root" group "Debian-exim" - mode 0o755 + mode "755" files_owner "root" files_group "Debian-exim" files_mode 0o755