add script to continuously check DNS settings

[ansible.git] / roles / unbound / templates / fix-dns

diff --git a/roles/unbound/templates/fix-dns b/roles/unbound/templates/fix-dns
new file mode 100644 (file)
index 0000000..ca7f860
--- /dev/null
+++ b/roles/unbound/templates/fix-dns
@@ -0,0 +1,12 @@
+#!/bin/bash
+set -e
+
+# Fix for some providers messing with DNS settings
+if ! diff /etc/resolv.conf <(echo "nameserver 127.0.0.2") > /dev/null; then
+       echo "Someone messed up our DNS! Fixing it..."
+       echo "nameserver 127.0.0.2" > /etc/resolv.conf
+{% if 'email' in group_names %}
+       # Just to make sure postfix uses the new settings
+       systemctl restart postfix
+{% endif %}
+fi