modules/named/manifests/init.pp

   1 class named {
   2     activate_munin_check {
   3         "bind":;
   4     }
   5
   6     package {
   7         bind9: ensure => installed;
   8     }
   9
  10     exec {
  11         "bind9 restart":
  12             path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
  13             refreshonly => true,
  14             ;
  15         "bind9 reload":
  16             path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
  17             refreshonly => true,
  18             ;
  19     }
  20     file {
  21         "/var/log/bind9":
  22             ensure  => directory,
  23             owner   => bind,
  24             group   => bind,
  25             mode    => 775,
  26             ;
  27         "/etc/bind/named.conf.options":
  28             content => template("named/named.conf.options.erb"),
  29             notify  => Exec["bind9 reload"],
  30     }
  31     @ferm::rule { "dsa-bind":
  32         domain          => "(ip ip6)",
  33         description     => "Allow nameserver access",
  34         rule            => "&TCP_UDP_SERVICE(53)"
  35     }
  36 }
  37
  38 # vim:set et:
  39 # vim:set sts=4 ts=4:
  40 # vim:set shiftwidth=4: