test(ubuntu): tested on ubuntu
This commit is contained in:
parent
d03840b0c6
commit
cd3bd685ce
@ -1,15 +1,15 @@
|
||||
---
|
||||
|
||||
- name: include special distribution-dependent variables
|
||||
- name: Include special distribution-dependent variables
|
||||
include_vars: "{{ ansible_os_family }}.yml"
|
||||
|
||||
- name: install bind and dependencies
|
||||
- name: Install bind and dependencies
|
||||
package:
|
||||
name: "{{ item }}"
|
||||
state: present
|
||||
with_items: "{{ bind_package_names }}"
|
||||
|
||||
- name: create logging directory
|
||||
- name: Create logging directory
|
||||
file:
|
||||
path: "{{ bind_log_directory }}"
|
||||
owner: "{{ bind_unix_user }}"
|
||||
@ -18,7 +18,16 @@
|
||||
state: directory
|
||||
recurse: yes
|
||||
|
||||
- name: remove existing journal files
|
||||
- name: Create config directory
|
||||
file:
|
||||
path: "{{ bind_config_directory }}"
|
||||
owner: "{{ bind_unix_user }}"
|
||||
group: "{{ bind_unix_group }}"
|
||||
mode: 0755
|
||||
state: directory
|
||||
recurse: yes
|
||||
|
||||
- name: Remove existing journal files
|
||||
block:
|
||||
- name: find existing journal files
|
||||
find:
|
||||
@ -40,30 +49,39 @@
|
||||
# loop_control:
|
||||
# loop_var: view
|
||||
|
||||
- name: template zone files
|
||||
- name: Create DNS-Zone files
|
||||
include_tasks: template_zone_files.yml
|
||||
with_items:
|
||||
- "{{ bind9_views }}"
|
||||
loop_control:
|
||||
loop_var: view
|
||||
|
||||
- name: set up global bind config
|
||||
- name: Create main configuration file
|
||||
template:
|
||||
src: "etc/named.conf.j2"
|
||||
dest: "{{ bind_main_config }}"
|
||||
owner: "{{ bind_unix_user }}"
|
||||
group: "{{ bind_unix_group }}"
|
||||
mode: 0644
|
||||
notify: restart named
|
||||
|
||||
- name: Create excluded configuration files
|
||||
template:
|
||||
src: "{{ item }}.j2"
|
||||
dest: "/etc/{{ item }}"
|
||||
dest: "{{ item | replace('etc/named', bind_config_directory) }}"
|
||||
owner: "{{ bind_unix_user }}"
|
||||
group: "{{ bind_unix_group }}"
|
||||
mode: 0644
|
||||
with_items:
|
||||
- named.conf
|
||||
- named/named.conf.acl
|
||||
- named/named.conf.logging
|
||||
- named/named.conf.options
|
||||
- named/named.conf.tsigkeys
|
||||
- named/named.conf.views
|
||||
- etc/named.conf
|
||||
- etc/named/named.conf.acl
|
||||
- etc/named/named.conf.logging
|
||||
- etc/named/named.conf.options
|
||||
- etc/named/named.conf.tsigkeys
|
||||
- etc/named/named.conf.views
|
||||
notify: restart named
|
||||
|
||||
- name: start and enabled named
|
||||
- name: Start and enabled named
|
||||
systemd:
|
||||
name: named
|
||||
state: started
|
||||
|
14
templates/etc/named.conf.j2
Normal file
14
templates/etc/named.conf.j2
Normal file
@ -0,0 +1,14 @@
|
||||
#
|
||||
# {{ ansible_managed }}
|
||||
#
|
||||
|
||||
# zone "." IN {
|
||||
# type hint;
|
||||
# file "named.ca";
|
||||
# };
|
||||
|
||||
include "{{ bind_config_directory }}/named.conf.acl";
|
||||
include "{{ bind_config_directory }}/named.conf.logging";
|
||||
include "{{ bind_config_directory }}/named.conf.options";
|
||||
include "{{ bind_config_directory }}/named.conf.tsigkeys";
|
||||
include "{{ bind_config_directory }}/named.conf.views";
|
@ -167,7 +167,7 @@ options {
|
||||
# allow-update-forwarding {};
|
||||
{% endif %}
|
||||
|
||||
directory "/etc/named";
|
||||
directory "{{ bind_config_directory }}";
|
||||
|
||||
dnssec-validation {{ bind9_options.dnssec_validation | default('no') }};
|
||||
|
@ -127,7 +127,7 @@ view "{{ view.name }}" {
|
||||
# is complete. If the Master is not available or the Slave fails to
|
||||
# contact the Master, ffor whatever reason, the zone may be left with
|
||||
# no effective Authoritative Name Servers.
|
||||
file "/etc/named/{{ zone.file }}";
|
||||
file "{{ bind_config_directory }}/{{ zone.file }}";
|
||||
|
||||
# master servers
|
||||
# https://bind9.readthedocs.io/en/latest/manpages.html?highlight=masters#masters
|
@ -1,12 +0,0 @@
|
||||
# zone "." IN {
|
||||
# type hint;
|
||||
# file "named.ca";
|
||||
# };
|
||||
|
||||
include "/etc/named/named.conf.acl";
|
||||
include "/etc/named/named.conf.logging";
|
||||
include "/etc/named/named.conf.options";
|
||||
include "/etc/named/named.conf.tsigkeys";
|
||||
include "/etc/named/named.conf.views";
|
||||
# include "/etc/named.rfc1912.zones";
|
||||
# include "/etc/named.root.key";
|
@ -1,8 +1,8 @@
|
||||
---
|
||||
|
||||
bind_main_config: /etc/named.conf
|
||||
bind_config_directory: /etc/named
|
||||
bind_log_directory: /var/log/named
|
||||
bind_main_config: /etc/bind/named.conf
|
||||
bind_config_directory: /etc/bind
|
||||
bind_log_directory: /var/log/bind
|
||||
|
||||
bind_package_names:
|
||||
- bind9
|
||||
|
Loading…
Reference in New Issue
Block a user