ensure our tsig keys are protected

[dsa-puppet.git] / modules / named / manifests / secondary.pp

diff --git a/modules/named/manifests/secondary.pp b/modules/named/manifests/secondary.pp
index b9615a627a9abb494d0f508815eee03ed3499028..8d00d0affc99e43f771b208a637a0dc10e9e0752 100644 (file)
--- a/modules/named/manifests/secondary.pp
+++ b/modules/named/manifests/secondary.pp
@@ -1,8 +1,13 @@
 class named::secondary inherits named {
-#    file { "/etc/bind/named.conf.debian-zones":
-#        source  => [ "puppet:///named/per-host/$fqdn/named.conf.debian-zones",
-#                     "puppet:///named/common/named.conf.debian-zones" ],
-#        notify  => Exec["bind9 reload"],
-#    }
+    file { "/etc/bind/named.conf.debian-zones":
+        source  => [ "puppet:///named/per-host/$fqdn/named.conf.debian-zones",
+                     "puppet:///named/common/named.conf.debian-zones" ],
+        notify  => Exec["bind9 reload"],
+    }
+    file { "/etc/bind/named.conf.shared-keys":
+        mode    => 640,
+        owner   => root,
+        group   => bind,
+    }
 }