test(ubuntu): tested on ubuntu

tasks/main.yml

@@ -1,15 +1,15 @@
 ---
 
-- name: include special distribution-dependent variables
+- name: Include special distribution-dependent variables
   include_vars: "{{ ansible_os_family }}.yml"
 
-- name: install bind and dependencies
+- name: Install bind and dependencies
   package:
     name: "{{ item }}"
     state: present
   with_items: "{{ bind_package_names }}"
 
-- name: create logging directory
+- name: Create logging directory
   file:
     path: "{{ bind_log_directory }}"
     owner: "{{ bind_unix_user }}"
@@ -18,7 +18,16 @@
     state: directory
     recurse: yes
 
-- name: remove existing journal files
+- name: Create config directory
+  file:
+    path: "{{ bind_config_directory }}"
+    owner: "{{ bind_unix_user }}"
+    group: "{{ bind_unix_group }}"
+    mode: 0755
+    state: directory
+    recurse: yes
+
+- name: Remove existing journal files
   block:
   - name: find existing journal files
     find:
@@ -40,30 +49,39 @@
 #   loop_control:
 #     loop_var: view
 
-- name: template zone files
+- name: Create DNS-Zone files
   include_tasks: template_zone_files.yml
   with_items:
   - "{{ bind9_views }}"
   loop_control:
     loop_var: view
 
-- name: set up global bind config
+- name: Create main configuration file
+  template:
+    src: "etc/named.conf.j2"
+    dest: "{{ bind_main_config }}"
+    owner: "{{ bind_unix_user }}"
+    group: "{{ bind_unix_group }}"
+    mode: 0644
+  notify: restart named
+
+- name: Create excluded configuration files
   template:
     src: "{{ item }}.j2"
-    dest: "/etc/{{ item }}"
+    dest: "{{ item | replace('etc/named', bind_config_directory) }}"
     owner: "{{ bind_unix_user }}"
     group: "{{ bind_unix_group }}"
     mode: 0644
   with_items:
-  - named.conf
+  - etc/named.conf
-  - named/named.conf.acl
+  - etc/named/named.conf.acl
-  - named/named.conf.logging
+  - etc/named/named.conf.logging
-  - named/named.conf.options
+  - etc/named/named.conf.options
-  - named/named.conf.tsigkeys
+  - etc/named/named.conf.tsigkeys
-  - named/named.conf.views
+  - etc/named/named.conf.views
   notify: restart named
 
-- name: start and enabled named
+- name: Start and enabled named
   systemd:
     name: named
     state: started

templates/etc/named.conf.j2

@@ -0,0 +1,14 @@
+#
+# {{ ansible_managed }}
+#
+
+# zone "." IN {
+#   type hint;
+#   file "named.ca";
+# };
+
+include "{{ bind_config_directory }}/named.conf.acl";
+include "{{ bind_config_directory }}/named.conf.logging";
+include "{{ bind_config_directory }}/named.conf.options";
+include "{{ bind_config_directory }}/named.conf.tsigkeys";
+include "{{ bind_config_directory }}/named.conf.views";

templates/etc/named/named.conf.options.j2

@@ -167,7 +167,7 @@ options {
   # allow-update-forwarding {};
 {% endif %}
 
-  directory "/etc/named";
+  directory "{{ bind_config_directory }}";
 
   dnssec-validation {{ bind9_options.dnssec_validation | default('no') }};
 

templates/etc/named/named.conf.views.j2

@@ -127,7 +127,7 @@ view "{{ view.name }}" {
     #   is complete. If the Master is not available or the Slave fails to
     #   contact the Master, ffor whatever reason, the zone may be left with
     #   no effective Authoritative Name Servers.
-    file "/etc/named/{{ zone.file }}";
+    file "{{ bind_config_directory }}/{{ zone.file }}";
 
     # master servers
     # https://bind9.readthedocs.io/en/latest/manpages.html?highlight=masters#masters

templates/named.conf.j2

@@ -1,12 +0,0 @@
-# zone "." IN {
-#   type hint;
-#   file "named.ca";
-# };
-
-include "/etc/named/named.conf.acl";
-include "/etc/named/named.conf.logging";
-include "/etc/named/named.conf.options";
-include "/etc/named/named.conf.tsigkeys";
-include "/etc/named/named.conf.views";
-# include "/etc/named.rfc1912.zones";
-# include "/etc/named.root.key";

vars/Debian.yml

@@ -1,8 +1,8 @@
 ---
 
-bind_main_config: /etc/named.conf
+bind_main_config: /etc/bind/named.conf
-bind_config_directory: /etc/named
+bind_config_directory: /etc/bind
-bind_log_directory: /var/log/named
+bind_log_directory: /var/log/bind
 
 bind_package_names:
 - bind9