X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fgeodns%2Fmanifests%2Finit.pp;h=5e4feaf05a42e04be6dca65ff09fd6d4c175f52b;hb=a7de4760fbf6d2bb39eea6c62c75fe0f2a016367;hp=b70dfcd89faf4ac9204c3b54df85c102488d945a;hpb=e3b2ac9b288d8001ace626d659aa862906d22da7;p=mirror%2Fdsa-puppet.git

diff --git a/modules/geodns/manifests/init.pp b/modules/geodns/manifests/init.pp
index b70dfcd89..5e4feaf05 100644
--- a/modules/geodns/manifests/init.pp
+++ b/modules/geodns/manifests/init.pp
@@ -1,53 +1,97 @@
 class geodns {
 
-    package { bind9: ensure => installed }
+        package {
+                bind9: ensure => installed;
+        }
 
-    file {
-      "/etc/apt/sources.list.d/geoip.list":
-             source => "puppet:///files/etc/apt/sources.list.d/geoip.list",
-             notify  => Exec["apt-get update"],
-             ;
-    }
-    file { "/etc/bind/named.conf.local":
-        source  => [ "puppet:///geodns/per-host/$fqdn/named.conf.local",
-                     "puppet:///geodns/common/named.conf.local" ],
-        require => Package["bind9"],
-        notify  => Exec["bind9 restart"],
-        owner   => root,
-        group   => root,
+        file {
+                "/etc/apt/sources.list.d/geoip.list":
+                        source => "puppet:///files/etc/apt/sources.list.d/geoip.list",
+                        notify  => Exec["apt-get update"],
+                        ;
+                "/etc/bind/named.conf.local":
+                        source  => [ "puppet:///geodns/per-host/$fqdn/named.conf.local",
+                                     "puppet:///geodns/common/named.conf.local" ],
+                        require => Package["bind9"],
+                        notify  => Exec["bind9 restart"],
+                        owner   => root,
+                        group   => root,
+                        ;
+                "/etc/bind/named.conf.acl":
+                        source  => [ "puppet:///geodns/per-host/$fqdn/named.conf.acl",
+                                     "puppet:///geodns/common/named.conf.acl" ],
+                        require => Package["bind9"],
+                        notify  => Exec["bind9 restart"],
+                        owner   => root,
+                        group   => root,
+                        ;
+                "/etc/bind/named.conf.options":
+                        source  => [ "puppet:///geodns/per-host/$fqdn/named.conf.options",
+                                     "puppet:///geodns/common/named.conf.options" ],
+                        require => Package["bind9"],
+                        notify  => Exec["bind9 restart"],
+                        owner   => root,
+                        group   => root,
+                        ;
 
-    }
-    file { "/etc/bind/named.conf.geo":
-        source  => [ "puppet:///geodns/per-host/$fqdn/named.conf.geo",
-                     "puppet:///geodns/common/named.conf.geo" ],
-        require => Package["bind9"],
-        notify  => Exec["bind9 restart"],
-        owner   => root,
-        group   => root,
+                "/etc/bind/geodns":
+                        ensure  => directory,
+                        owner   => root,
+                        group   => geodnssync,
+                        mode    => 775,
+                        ;
+                "/etc/bind/geodns/named.conf.geo":
+                        source  => [ "puppet:///geodns/per-host/$fqdn/named.conf.geo",
+                                     "puppet:///geodns/common/named.conf.geo" ],
+                        require => Package["bind9"],
+                        notify  => Exec["bind9 restart"],
+                        owner   => root,
+                        group   => root,
+                        ;
+                "/etc/bind/geodns/recvconf":
+                        source  => [ "puppet:///geodns/per-host/$fqdn/recvconf",
+                                     "puppet:///geodns/common/recvconf" ],
+                        owner   => root,
+                        group   => root,
+                        mode    => 555,
+                        ;
+                "/etc/bind/geodns/recvconf.files":
+                        source  => [ "puppet:///geodns/per-host/$fqdn/recvconf.files",
+                                     "puppet:///geodns/common/recvconf.files" ],
+                        owner   => root,
+                        group   => root,
+                        mode    => 444,
+                        ;
 
-    }
-    file { "/etc/bind/named.conf.acl":
-        source  => [ "puppet:///geodns/per-host/$fqdn/named.conf.acl",
-                     "puppet:///geodns/common/named.conf.acl" ],
-        require => Package["bind9"],
-        notify  => Exec["bind9 restart"],
-        owner   => root,
-        group   => root,
+                "/usr/share/GeoIP/GeoIPv6.dat":
+                        source  => [ "puppet:///geodns/per-host/$fqdn/GeoIPv6.dat",
+                                     "puppet:///geodns/common/GeoIPv6.dat" ],
+                        owner   => root,
+                        group   => root,
+                        mode    => 444,
+                        ;
 
-    }
-    file { "/etc/bind/named.conf.options":
-        source  => [ "puppet:///geodns/per-host/$fqdn/named.conf.options",
-                     "puppet:///geodns/common/named.conf.options" ],
-        require => Package["bind9"],
-        notify  => Exec["bind9 restart"],
-        owner   => root,
-        group   => root,
+                "/etc/ssh/userkeys/geodnssync":
+                        source  => [ "puppet:///geodns/per-host/$fqdn/authorized_keys",
+                                     "puppet:///geodns/common/authorized_keys" ],
+                        owner   => root,
+                        group   => geodnssync,
+                        mode    => 440,
+                        ;
+                "/var/log/bind9":
+                        ensure  => directory,
+                        owner   => bind,
+                        group   => bind,
+                        mode    => 775,
+                        ;
+        }
 
-    }
-
-    exec { "bind9 restart":
-        path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
-        refreshonly => true,
-    }
+        exec {
+                "bind9 restart":
+                        path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
+                        refreshonly => true,
+                        ;
+        }
 }
 
+# vim: set fdm=marker ts=8 sw=8 et: