feat(bind9): support systemd drop-ins

Keep role configuration namespaced and allow hosts to customize systemd startup.

Co-authored-by: Copilot <copilot@github.com>

templates/etc/named.conf.j2

@@ -7,8 +7,8 @@
 #   file "named.ca";
 # };
 
-include "{{ bind_config_directory }}/named.conf.acl";
-include "{{ bind_config_directory }}/named.conf.logging";
-include "{{ bind_config_directory }}/named.conf.options";
-include "{{ bind_config_directory }}/named.conf.tsigkeys";
-include "{{ bind_config_directory }}/named.conf.views";
+include "{{ bind9_config_directory }}/named.conf.acl";
+include "{{ bind9_config_directory }}/named.conf.logging";
+include "{{ bind9_config_directory }}/named.conf.options";
+include "{{ bind9_config_directory }}/named.conf.tsigkeys";
+include "{{ bind9_config_directory }}/named.conf.views";

templates/etc/named/named.conf.options.j2

@@ -184,7 +184,7 @@ options {
   # allow-update-forwarding {};
 {% endif %}
 
-  directory "{{ bind_config_directory }}";
+  directory "{{ bind9_config_directory }}";
 
   # This accepts expired signatures when verifying DNSSEC signatures. The default is no. Setting this option to yes
   # leaves named vulnerable to replay attacks.

templates/etc/named/named.conf.views.j2

@@ -148,11 +148,11 @@ view "{{ view.name }}" {
     #   contact the Master, ffor whatever reason, the zone may be left with
     #   no effective Authoritative Name Servers.
 {% if zone.file is defined and zone.file | length > 0 and not zone.file.startswith('/') %}
-    file "{{ bind_config_directory }}/{{ zone.config.file }}";
+    file "{{ bind9_config_directory }}/{{ zone.config.file }}";
 {% elif zone.file is defined and zone.file | length > 0 and zone.file.startswith('/')%}
     file "{{ zone.config.file }}";
 {% else %}
-    # file "{{ bind_config_directory }}/...";
+    # file "{{ bind9_config_directory }}/...";
 {% endif %}
 
     # This option is only meaningful if the forwarders list is not empty. A

templates/etc/systemd/system/named.service.d/override.conf.j2

@@ -0,0 +1,4 @@
+#
+# {{ ansible_managed }}
+#
+{{ bind9_systemd_dropin }}