Initial log level setup

Author: Manu

authoritative/Dockerfile

@@ -11,8 +11,11 @@ RUN apt-get -y --no-install-recommends install pdns-server pdns-backend-pgsql &&
 
 COPY pdns.conf /etc/powerdns/pdns.d/pdns.conf
 
+ARG LOG_LEVEL
+
 RUN --mount=type=secret,id=db_password --mount=type=secret,id=api_key sed -i "s/secret_pdns_password/$(cat /run/secrets/db_password)/g" /etc/powerdns/pdns.d/pdns.conf && \
     sed -i "s/secret_api_key/$(cat /run/secrets/api_key)/g" /etc/powerdns/pdns.d/pdns.conf && \
+    sed -i "s/log_level/${LOG_LEVEL}/g" /etc/powerdns/pdns.d/pdns.conf && \
     mkdir /var/run/pdns && \
     chown -R pdns:pdns /var/run/pdns /etc/powerdns/
 

authoritative/pdns.conf

@@ -22,3 +22,5 @@ webserver-allow-from=0.0.0.0/0
 guardian=yes
 
 disable-axfr=yes
+
+loglevel=log_level

docker-compose.yml

@@ -30,7 +30,10 @@ services:
       - no-new-privileges
 
   powerhole_pdns_authoritative:
-    build: authoritative
+    build:
+      context: authoritative
+      args:
+        LOG_LEVEL: 6  # 3 - 6 (https://doc.powerdns.com/authoritative/settings.html#loglevel)
     image: powerhole:authoritative
     container_name: powerhole_pdns_authoritative
     hostname: powerhole_pdns_authoritative
@@ -104,7 +107,10 @@ services:
       - no-new-privileges
 
   powerhole_pdns_recursor:
-    build: recursor
+    build:
+      context: recursor
+      args:
+        LOG_LEVEL: 9  # 0 - 9 (https://doc.powerdns.com/recursor/settings.html#loglevel)
     image: powerhole:recursor
     container_name: powerhole_pdns_recursor
     hostname: powerhole_pdns_recursor

recursor/Dockerfile

@@ -11,7 +11,10 @@ RUN apt-get -y --no-install-recommends install pdns-recursor && \
 
 COPY --chown=pdns:pdns recursor.conf /etc/powerdns/recursor.d/recursor.conf
 
+ARG LOG_LEVEL
+
 RUN mkdir /var/run/pdns && \
+    sed -i "s/log_level/${LOG_LEVEL}/g" /etc/powerdns/recursor.d/recursor.conf && \
     chown -R pdns:pdns /var/run/pdns
 
 USER pdns

recursor/recursor.conf

@@ -7,3 +7,5 @@ setuid=
 serve-rfc1918=no
 # Do not validate DNSSEC as it breaks many websites
 dnssec=process-no-validate
+
+loglevel=log_level