Dustin C. Hatch
0629a063bc
The *named* role now supports generating configuration for authoritative DNS zones and DNSSEC keys. Zones are defined by populating the `named_zones` variable with a list of objects describing the zone. Zone properties can include: * `name`: The DNS domain name * `type`: The zone type, defaults to `master` * `allow_update`: A list of hosts/networks or DNSSEC key names (which must be specified as an object with a `key` property) * `update_policy`: A list of BIND update policy statements * `ttl`: The default (minimum) TTL for the zone * `origin`: The authoritative name server for the zone * `refresh`, `retry`, `expire`: Record cache timeout values * `default_records`: A list of default records, defined as objects with the following properties: * `name`: The RR name * `type`: The RR type (default: `A`) * `value`: The RR value Zone files will be created in `/var/named/dynamic`. Existing zone files will **not** be overwritten; management of zone records is done using `nsupdate` or similar.
22 lines
432 B
YAML
22 lines
432 B
YAML
named_listen:
|
|
- port: 53
|
|
addresses:
|
|
- 127.0.0.1
|
|
named_listen_v6:
|
|
- port: 53
|
|
addresses:
|
|
- ::1
|
|
named_allow_query:
|
|
- localhost
|
|
named_allow_update: []
|
|
named_recursion: true
|
|
named_dnssec: true
|
|
named_dnssec_validation: true
|
|
named_global_include: []
|
|
named_options_include: '{{ named_default_options_include }}'
|
|
named_zones: []
|
|
named_default_ttl: 3600
|
|
named_default_refresh: 900
|
|
named_default_retry: 600
|
|
named_default_expire: 86400
|