h3artbl33d/chatmail
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

pyinfra: only install unbound-anchor on Debian systems

Browse Source
This commit is contained in:
missytake 2023-12-19 17:28:11 +01:00
parent 1e4b776de5
commit 7a2a889585
1 changed files with 12 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
cmdeploy/src/cmdeploy/__init__.py
View File

@ -12,6 +12,7 @@ from pyinfra import host
from pyinfra.operations import apt, files, server, systemd, pip
from pyinfra.facts.files import File
from pyinfra.facts.systemd import SystemdEnabled
from pyinfra.facts.server import LinuxDistribution
from .acmetool import deploy_acmetool
from chatmaild.config import read_config, Config
@ -399,12 +400,18 @@ def deploy_chatmail(config_path: Path) -> None:
# to use 127.0.0.1 as the resolver.
apt.packages(
name="Install unbound",
packages=["unbound", "unbound-anchor"],
)
server.shell(
name="Generate root keys for validating DNSSEC",
commands=["unbound-anchor -a /var/lib/unbound/root.key || true"],
packages=["unbound"],
)
if host.get_fact(LinuxDistribution).get("name") == "Debian":
# on Debian, the root key doesn't seem to be auto-generated during apt install unbound.
apt.packages(
name="Install unbound-anchor for generating DNSSEC validation root key",
packages=["unbound-anchor"],
)
server.shell(
name="Generate root keys for validating DNSSEC",
commands=["unbound-anchor -a /var/lib/unbound/root.key || true"],
)
systemd.service(
name="Start and enable unbound",
service="unbound.service",