From: Jakub Czajka <jakub@ekhem.eu.org>
Date: Sun, 30 Mar 2025 10:04:33 +0000 (+0200)
Subject: Respect tenable blacklist.
X-Git-Url: https://git.ekhem.eu.org/?a=commitdiff_plain;h=f798204a6e06c8be9ccf34484dd5a3a5eacc5b75;p=cron.git

Respect tenable blacklist.
---

diff --git a/blocklist.service b/blocklist.service
index 860eda5..b12d63d 100644
--- a/blocklist.service
+++ b/blocklist.service
@@ -11,7 +11,7 @@ EnvironmentFile=/etc/ansible/facts.d/env.fact
 ExecStartPre=/usr/bin/git \
     --work-tree=/tmp \
     --git-dir=${git_home_dir}/config.git \
-    checkout main --force blacklist.txt
+    checkout main --force blacklist.txt tenable-blacklist.txt
 ExecStartPre=/usr/bin/git \
     --work-tree=/tmp \
     --git-dir=${git_home_dir}/server.git \
@@ -22,6 +22,6 @@ ExecStartPre=/usr/bin/wget \
 ExecStart=/usr/bin/python3 /tmp/generate-domains-blocklist.py \
     --allowlist '' \
     --config /tmp/dnscrypt-proxy/domains-blocklist.txt \
-    --time-restricted '' \
+    --time-restricted '/tmp/tenable-blacklist.txt' \
     --output /etc/dns/blocked-names.txt