From d8e3f059ef06d43cfbbd624774d756b86176fff4 Mon Sep 17 00:00:00 2001 From: Stephen Gran Date: Sun, 14 Apr 2013 17:09:16 +0100 Subject: [PATCH] use correct test Signed-off-by: Stephen Gran --- modules/unbound/manifests/init.pp | 1 + modules/unbound/templates/unbound.conf.erb | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/modules/unbound/manifests/init.pp b/modules/unbound/manifests/init.pp index 5261009b..587b19bb 100644 --- a/modules/unbound/manifests/init.pp +++ b/modules/unbound/manifests/init.pp @@ -10,6 +10,7 @@ class unbound { $is_recursor = getfromhash($site::nodeinfo, 'misc', 'resolver-recursive') $client_ranges = getfromhash($site::nodeinfo, 'hoster', 'allow_dns_query') + $dodgy_ns = getfromhash($site::nodeinfo, 'hoster', 'nameservers_break_dnssec') $ns = hiera('nameservers') package { 'unbound': diff --git a/modules/unbound/templates/unbound.conf.erb b/modules/unbound/templates/unbound.conf.erb index 5dad1631..0546980c 100644 --- a/modules/unbound/templates/unbound.conf.erb +++ b/modules/unbound/templates/unbound.conf.erb @@ -44,7 +44,7 @@ server: auto-trust-anchor-file: "/var/lib/unbound/root.key" auto-trust-anchor-file: "/var/lib/unbound/debian.org.key" -<% if not @is_recursor and not @client_ranges -%> +<% if not @is_recursor and not @dodgy_ns -%> forward-zone: name: "." <% @ns.to_a.flatten.each do |nms| -%> -- 2.39.2