nameserver: ensure named directories have right owner and permissions

Signed-off-by: Kyr Shatskyy <kyrylo.shatskyy@gmail.com>

diff --git a/roles/nameserver/tasks/config.yml b/roles/nameserver/tasks/config.yml
index c1305393d10be29fe93957a15cc8e681f876eea5..bfbd2cb371509a0b003475b9d42d74ddd2522663 100644 (file)
--- a/roles/nameserver/tasks/config.yml
+++ b/roles/nameserver/tasks/config.yml
@@ -3,6 +3,8 @@
   file:
     path: "{{ named_conf_data_dir }}"
     state: directory
+    owner: named
+    group: named
 
 - name: Create named.conf
   template:

diff --git a/roles/nameserver/tasks/main.yml b/roles/nameserver/tasks/main.yml
index c35dd0c870cad7697a13c670a428ce84018fb9f7..dbd83f34b2b8ce46fba864db9256eb31d36b04b7 100644 (file)
--- a/roles/nameserver/tasks/main.yml
+++ b/roles/nameserver/tasks/main.yml
@@ -19,9 +19,11 @@
     - always
 
 # DDNS updates fail to create or edit jnl files without this
-- name: Ensure permissions set for /var/named/zones
+- name: Ensure permissions set for "{{ named_conf_zones_path }}"
   file:
-    path: /var/named/zones
+    path: "{{ named_conf_zones_path }}"
+    mode: '0700'
+    state: directory
     owner: named
     group: named
   tags: