X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/9891b6455a40018f68fa9c548e238110dd0099c3..45dde9418dd342bb1a632d82559201c0b3becf1a:/cookbooks/geodns/recipes/default.rb diff --git a/cookbooks/geodns/recipes/default.rb b/cookbooks/geodns/recipes/default.rb index 0e20e2a26..f24f1b8de 100644 --- a/cookbooks/geodns/recipes/default.rb +++ b/cookbooks/geodns/recipes/default.rb @@ -1,8 +1,8 @@ # -# Cookbook Name:: geodns +# Cookbook:: geodns # Recipe:: default # -# Copyright 2011, OpenStreetMap Foundation +# Copyright:: 2011, OpenStreetMap Foundation # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. @@ -29,6 +29,12 @@ execute "geoipdate" do not_if { ::File.exist?("/var/lib/GeoIP/GeoLite2-Country.mmdb") } end +directory "/etc/gdnsd/config.d" do + owner "nobody" + group "nogroup" + mode 0o755 +end + template "/etc/gdnsd/config" do source "config.erb" owner "root" @@ -50,6 +56,29 @@ service "gdnsd" do supports :status => true, :restart => true, :reload => true end +systemd_service "gdnsd-reload" do + description "Reload gdnsd configuration" + type "simple" + user "root" + exec_start "/bin/systemctl reload-or-restart gdnsd" + standard_output "null" + private_tmp true + private_devices true + protect_system "full" + protect_home true + no_new_privileges true +end + +systemd_path "gdnsd-reload" do + description "Reload gdnsd configuration" + path_changed "/etc/gdnsd/config.d" +end + +service "gdnsd-reload.path" do + action [:enable, :start] + subscribes :restart, "systemd_path[gdnsd-reload]" +end + firewall_rule "accept-dns-udp" do action :accept source "net"