kevinveenbirkenbachandClaude Opus 5 b12ff8d0c4 fix(svc-net-tor): tie the dnsmasq reload to the branch that writes its drop-in ...

The systemd drop-in is written inside a block gated on TOR_DNSMASQ_OWNS_LISTENER, which turns false as soon as a foreign file sits in /etc/dnsmasq.d. The start task read that block's register unconditionally, so the expression's correctness depended on ansible defining a register for a task it skipped. Short-circuiting on the same condition means the register is never reached when the block did not run, and the question stops mattering.

The test asserted the literal declaration string, which exercises nothing. It now renders the expression read from the role with ansible's own bool filter and a changed test, in both states: owning the listener with a rewritten drop-in yields True, not owning it yields False without touching the register. The previous form raises UndefinedError under the second case.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-16 01:27:04 +02:00

..

flavor

feat(svc-net-tor): add a chutney flavor for private-net test deployments

2026-07-24 19:31:16 +02:00

00_core.yml

feat(svc-net-tor): carry mail to a .onion in both deploy modes

2026-09-15 17:13:12 +02:00

main.yml

refactor(tasks): apply the 00_core numbering scheme to branch-local roles

2026-07-24 19:00:42 +02:00

onion_reach.yml

refactor(layout): sort shipped scripts by language and split the unit suite

2026-08-22 01:31:09 +02:00

router.yml

fix(svc-net-tor): tie the dnsmasq reload to the branch that writes its drop-in

2026-09-16 01:27:04 +02:00