+template "/var/lib/dns/creds.json" do
+ source "creds.json.erb"
+ owner "git"
+ group "git"
+ mode 0o440
+ variables :passwords => passwords
+end
+
+execute "dns-update-sshfp" do
+ action :nothing
+ command "/usr/local/bin/dns-update-sshfp"
+ user "git"
+ group "git"
+ subscribes :run, "template[/etc/ssh/ssh_known_hosts]"
+end
+