X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fnamed%2Fmanifests%2Finit.pp;h=8cfa4080c24542bc8a690a1cd7604dcc53e4e8e8;hb=31447ef91aa6f77a5d74457a94c1f4e172f32a4d;hp=0c75aebf07dc854b9db0d59cbd04e2365a0ce38c;hpb=96f38cb57f542dd3d83e9b0b7bf201e3ec23f2d3;p=mirror%2Fdsa-puppet.git

diff --git a/modules/named/manifests/init.pp b/modules/named/manifests/init.pp
index 0c75aebf0..8cfa4080c 100644
--- a/modules/named/manifests/init.pp
+++ b/modules/named/manifests/init.pp
@@ -1,22 +1,37 @@
 class named {
-        include munin-node::bind
+    activate_munin_check {
+        "bind":;
+    }
 
-        package {
-                bind9: ensure => installed;
-        }
+    package {
+        bind9: ensure => installed;
+    }
 
-        exec {
-                "bind9 restart":
-                        path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
-                        refreshonly => true,
-                        ;
-        }
-        exec {
-                "bind9 reload":
-                        path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
-                        refreshonly => true,
-                        ;
-        }
+    exec {
+        "bind9 restart":
+            path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
+            refreshonly => true,
+            ;
+        "bind9 reload":
+            path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
+            refreshonly => true,
+            ;
+    }
+    file {
+        "/var/log/bind9":
+            ensure  => directory,
+            owner   => bind,
+            group   => bind,
+            mode    => 775,
+            ;
+    }
+    @ferm::rule { "dsa-bind":
+        domain          => "(ip ip6)",
+        description     => "Allow nameserver access",
+        rule            => "&TCP_UDP_SERVICE(53)"
+    }
 }
 
-# vim: set fdm=marker ts=8 sw=8 et:
+# vim:set et:
+# vim:set sts=4 ts=4:
+# vim:set shiftwidth=4: