volker.raschekandCopilot
d7826d46a1
Keep role configuration namespaced and allow hosts to customize systemd startup. Co-authored-by: Copilot <copilot@github.com>
29 lines
908 B
YAML
29 lines
908 B
YAML
---
|
|
|
|
- name: "Sign DNS Zone {{ zone.config.origin }}"
|
|
vars:
|
|
dnssec_cmd:
|
|
- dnssec-signzone
|
|
- -N
|
|
- INCREMENT
|
|
- -S
|
|
- -K
|
|
- "{{ bind9_options.key_directory }}"
|
|
block:
|
|
- name: "Extend dnssec command of ORIGIN"
|
|
ansible.builtin.set_fact:
|
|
_dnssec_cmd: "{{ dnssec_cmd + ['-o', zone.config.origin] }}"
|
|
- name: "Extend dnssec command of zone file"
|
|
ansible.builtin.set_fact:
|
|
_dnssec_cmd: "{{ _dnssec_cmd + [bind9_config_directory + '/' + zone.file] }}"
|
|
- name: "Sign zone {{ zone.config.origin }}"
|
|
ansible.builtin.command:
|
|
argv: "{{ _dnssec_cmd }}"
|
|
creates: "{{ bind9_config_directory + '/' + zone.file }}.signed"
|
|
- name: Adapt signed zone file permissions
|
|
ansible.builtin.file:
|
|
path: "{{ bind9_config_directory + '/' + zone.file }}.signed"
|
|
owner: "{{ bind9_unix_user }}"
|
|
group: "{{ bind9_unix_group }}"
|
|
mode: "0644"
|