ansible-role-bind9/tasks/main.yml
Markus Pesch 015463f33a
All checks were successful
continuous-integration/drone/push Build is passing
fix: use a better task name to load os specific vars
2022-12-28 22:05:11 +01:00

88 lines
2.0 KiB
YAML

---
- name: Include OS-specific variables
include_vars: "{{ ansible_os_family }}.yml"
- name: Install bind and dependencies
package:
name: "{{ item }}"
state: present
with_items: "{{ bind_package_names }}"
- name: Create logging directory
file:
path: "{{ bind_log_directory }}"
owner: "{{ bind_unix_user }}"
group: "{{ bind_unix_group }}"
mode: 0755
state: directory
recurse: yes
- name: Create config directory
file:
path: "{{ bind_config_directory }}"
owner: "{{ bind_unix_user }}"
group: "{{ bind_unix_group }}"
mode: 0755
state: directory
recurse: yes
- name: Remove existing journal files
block:
- name: find existing journal files
find:
path: "{{ bind_config_directory }}"
recurse: yes
patterns: "*.jnl"
register: files_to_delete
- name: delete existing journal files
file:
path: "{{ item.path }}"
state: absent
with_items: "{{ files_to_delete.files }}"
# - name: copy zone files
# include_tasks: copy_zone_files.yml
# with_items:
# - "{{ bind9_views }}"
# loop_control:
# loop_var: view
- name: Create DNS-Zone files
include_tasks: template_zone_files.yml
with_items:
- "{{ bind9_views }}"
loop_control:
loop_var: view
- name: Create main configuration file
template:
src: "etc/named.conf.j2"
dest: "{{ bind_main_config }}"
owner: "{{ bind_unix_user }}"
group: "{{ bind_unix_group }}"
mode: 0644
notify: restart named
- name: Create excluded configuration files
template:
src: "{{ item }}.j2"
dest: "{{ item | replace('etc/named', bind_config_directory) }}"
owner: "{{ bind_unix_user }}"
group: "{{ bind_unix_group }}"
mode: 0644
with_items:
- etc/named.conf
- etc/named/named.conf.acl
- etc/named/named.conf.logging
- etc/named/named.conf.options
- etc/named/named.conf.tsigkeys
- etc/named/named.conf.views
notify: restart named
- name: Start and enabled named
systemd:
name: named
state: started
enabled: yes