dustin/configpolicy
1
1
Fork 0
Code Issues Releases Activity

roles/named: Support managing zones

Browse Source 
The *named* role now supports generating configuration for authoritative
DNS zones and DNSSEC keys. Zones are defined by populating the
`named_zones` variable with a list of objects describing the zone. Zone
properties can include:

* `name`: The DNS domain name
* `type`: The zone type, defaults to `master`
* `allow_update`: A list of hosts/networks or DNSSEC key names (which
  must be specified as an object with a `key` property)
* `update_policy`: A list of BIND update policy statements
* `ttl`: The default (minimum) TTL for the zone
* `origin`: The authoritative name server for the zone
* `refresh`, `retry`, `expire`: Record cache timeout values
* `default_records`: A list of default records, defined as objects with
  the following properties:
  * `name`: The RR name
  * `type`: The RR type (default: `A`)
  * `value`: The RR value

Zone files will be created in `/var/named/dynamic`. Existing zone files
will **not** be overwritten; management of zone records is done using
`nsupdate` or similar.
This commit is contained in:
Dustin
2018-02-20 16:00:55 -06:00
parent 7144701787
commit 0629a063bc
5 changed files with 67 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
roles/named/defaults/main.yml
View File

@@ -14,3 +14,8 @@ named_dnssec: true
named_dnssec_validation: true
named_global_include: []
named_options_include: '{{ named_default_options_include }}'
named_zones: []
named_default_ttl: 3600
named_default_refresh: 900
named_default_retry: 600
named_default_expire: 86400