abrown38andClaude Opus 5.5
293e6ddd33
- Daily database backups: jarl-backup.timer runs 'jarld backup', which writes jarl-<UTC time>.db into backup.dir, checks it before naming it, and prunes by the time in the name while always keeping the newest keep_at_least. New backup: section in jarl.yaml; the dashboard and 'jarl status' show the newest backup and warn when it is stale or failed. The Debian package enables the timer. - 'jarld restore [FILE | latest]': checks the backup, shows it next to the current database, keeps the current one aside and records the restore. 'jarld serve' holds a database lock, so a restore can't run under a live jarld and two jarlds can't share a database. - Token expiry warnings from 14 days ahead: dashboard, token lists, a daily log line, and a CLI warning via the Jarl-Token-Expires header; 'jarl token list --expiring'. - 'jarl zone serials' and the zone page's Name servers tab: compare the serial on a primary zone's secondaries (NS records, also-notify) or a secondary zone's primaries with this server's. - 'jarl zone delegation': for zones on the internet, check the parent's delegation and glue against the zone; an undelegated zone gets a note. - Server: Jarl/<version> header; CLI exit code 2 for failed checks. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
19 lines
952 B
Plaintext
19 lines
952 B
Plaintext
# Directories Jarl needs (installed as /usr/lib/tmpfiles.d/jarl.conf).
|
|
# Apply with: systemd-tmpfiles --create jarl.conf
|
|
#
|
|
# Type Path Mode User Group
|
|
d /etc/jarl 0750 root jarl
|
|
d /var/lib/jarl 0750 jarl jarl
|
|
# Generated named configuration: named reads it (AppArmor allows /etc/bind).
|
|
d /etc/bind/jarl 2750 jarl bind
|
|
# Primary zone files: named may write journals here (/var/lib/bind is writable for named).
|
|
d /var/lib/bind/jarl 2770 jarl bind
|
|
# Files named writes for secondary, stub and mirror zones.
|
|
d /var/cache/bind/jarl 2770 jarl bind
|
|
# Query statistics (stats in jarl.yaml): named writes its response log here
|
|
# (Debian's AppArmor profile allows /var/log/named) and jarld reads it as a
|
|
# member of group bind.
|
|
d /var/log/named 0750 bind bind
|
|
# Database backups (jarl-backup.timer; backup.dir in jarl.yaml).
|
|
d /var/backups/jarl 0700 jarl jarl
|