X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/ca91e26c0c3941b95e6d11eecf0ac3c1975d2e35..b53cbecada759e3169a483989fc50d9e2a5c25c0:/cookbooks/dns/recipes/default.rb diff --git a/cookbooks/dns/recipes/default.rb b/cookbooks/dns/recipes/default.rb index a78d1d5fc..ac404488b 100644 --- a/cookbooks/dns/recipes/default.rb +++ b/cookbooks/dns/recipes/default.rb @@ -1,8 +1,8 @@ # -# Cookbook Name:: dns +# Cookbook:: dns # Recipe:: default # -# Copyright 2011, OpenStreetMap Foundation +# Copyright:: 2011, OpenStreetMap Foundation # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. @@ -20,10 +20,14 @@ include_recipe "git" include_recipe "apache" +geoservers = search(:node, "roles:geodns").collect(&:name).sort + passwords = data_bag_item("dns", "passwords") package %w[ make + parallel + rsync perl libxml-treebuilder-perl libxml-writer-perl @@ -32,6 +36,14 @@ package %w[ libjson-xs-perl ] +remote_file "/usr/local/bin/dnscontrol" do + action :create + source "https://github.com/StackExchange/dnscontrol/releases/download/v2.10.0/dnscontrol-Linux" + owner "root" + group "root" + mode 0o755 +end + directory "/srv/dns.openstreetmap.org" do owner "root" group "root" @@ -88,7 +100,7 @@ template "/usr/local/bin/dns-update" do owner "root" group "git" mode 0o750 - variables :passwords => passwords + variables :passwords => passwords, :geoservers => geoservers end execute "dns-update" do @@ -105,6 +117,14 @@ directory "/var/lib/dns" do notifies :run, "execute[dns-update]" end +template "/var/lib/dns/creds.json" do + source "creds.json.erb" + owner "git" + group "git" + mode 0o440 + variables :passwords => passwords +end + cookbook_file "#{node[:dns][:repository]}/hooks/post-receive" do source "post-receive" owner "git" @@ -117,7 +137,7 @@ template "/usr/local/bin/dns-check" do owner "root" group "git" mode 0o750 - variables :passwords => passwords + variables :passwords => passwords, :geoservers => geoservers end template "/etc/cron.d/dns" do