# Directories Jarl needs (installed as /usr/lib/tmpfiles.d/jarl.conf).
# Apply with: systemd-tmpfiles --create jarl.conf
#
# Type Path                  Mode  User Group
d      /etc/jarl             0750  root jarl
d      /var/lib/jarl         0750  jarl jarl
# Generated named configuration: named reads it (AppArmor allows /etc/bind).
d      /etc/bind/jarl        2750  jarl bind
# Primary zone files: named may write journals here (/var/lib/bind is writable for named).
d      /var/lib/bind/jarl    2770  jarl bind
# Files named writes for secondary, stub and mirror zones.
d      /var/cache/bind/jarl  2770  jarl bind
# Query statistics (stats in jarl.yaml): named writes its response log here
# (Debian's AppArmor profile allows /var/log/named) and jarld reads it as a
# member of group bind.
d      /var/log/named        0750  bind bind
# Database backups (jarl-backup.timer; backup.dir in jarl.yaml).
d      /var/backups/jarl     0700  jarl jarl