test(ubuntu): tested on ubuntu

This commit is contained in:
Markus Pesch 2022-04-04 16:00:11 +02:00
parent d03840b0c6
commit cd3bd685ce
Signed by: volker.raschek
GPG Key ID: 852BCC170D81A982
9 changed files with 51 additions and 31 deletions

View File

@ -1,15 +1,15 @@
---
- name: include special distribution-dependent variables
- name: Include special distribution-dependent variables
include_vars: "{{ ansible_os_family }}.yml"
- name: install bind and dependencies
- name: Install bind and dependencies
package:
name: "{{ item }}"
state: present
with_items: "{{ bind_package_names }}"
- name: create logging directory
- name: Create logging directory
file:
path: "{{ bind_log_directory }}"
owner: "{{ bind_unix_user }}"
@ -18,7 +18,16 @@
state: directory
recurse: yes
- name: remove existing journal files
- name: Create config directory
file:
path: "{{ bind_config_directory }}"
owner: "{{ bind_unix_user }}"
group: "{{ bind_unix_group }}"
mode: 0755
state: directory
recurse: yes
- name: Remove existing journal files
block:
- name: find existing journal files
find:
@ -40,30 +49,39 @@
# loop_control:
# loop_var: view
- name: template zone files
- name: Create DNS-Zone files
include_tasks: template_zone_files.yml
with_items:
- "{{ bind9_views }}"
loop_control:
loop_var: view
- name: set up global bind config
- name: Create main configuration file
template:
src: "etc/named.conf.j2"
dest: "{{ bind_main_config }}"
owner: "{{ bind_unix_user }}"
group: "{{ bind_unix_group }}"
mode: 0644
notify: restart named
- name: Create excluded configuration files
template:
src: "{{ item }}.j2"
dest: "/etc/{{ item }}"
dest: "{{ item | replace('etc/named', bind_config_directory) }}"
owner: "{{ bind_unix_user }}"
group: "{{ bind_unix_group }}"
mode: 0644
with_items:
- named.conf
- named/named.conf.acl
- named/named.conf.logging
- named/named.conf.options
- named/named.conf.tsigkeys
- named/named.conf.views
- etc/named.conf
- etc/named/named.conf.acl
- etc/named/named.conf.logging
- etc/named/named.conf.options
- etc/named/named.conf.tsigkeys
- etc/named/named.conf.views
notify: restart named
- name: start and enabled named
- name: Start and enabled named
systemd:
name: named
state: started

View File

@ -0,0 +1,14 @@
#
# {{ ansible_managed }}
#
# zone "." IN {
# type hint;
# file "named.ca";
# };
include "{{ bind_config_directory }}/named.conf.acl";
include "{{ bind_config_directory }}/named.conf.logging";
include "{{ bind_config_directory }}/named.conf.options";
include "{{ bind_config_directory }}/named.conf.tsigkeys";
include "{{ bind_config_directory }}/named.conf.views";

View File

@ -167,7 +167,7 @@ options {
# allow-update-forwarding {};
{% endif %}
directory "/etc/named";
directory "{{ bind_config_directory }}";
dnssec-validation {{ bind9_options.dnssec_validation | default('no') }};

View File

@ -127,7 +127,7 @@ view "{{ view.name }}" {
# is complete. If the Master is not available or the Slave fails to
# contact the Master, ffor whatever reason, the zone may be left with
# no effective Authoritative Name Servers.
file "/etc/named/{{ zone.file }}";
file "{{ bind_config_directory }}/{{ zone.file }}";
# master servers
# https://bind9.readthedocs.io/en/latest/manpages.html?highlight=masters#masters

View File

@ -1,12 +0,0 @@
# zone "." IN {
# type hint;
# file "named.ca";
# };
include "/etc/named/named.conf.acl";
include "/etc/named/named.conf.logging";
include "/etc/named/named.conf.options";
include "/etc/named/named.conf.tsigkeys";
include "/etc/named/named.conf.views";
# include "/etc/named.rfc1912.zones";
# include "/etc/named.root.key";

View File

@ -1,8 +1,8 @@
---
bind_main_config: /etc/named.conf
bind_config_directory: /etc/named
bind_log_directory: /var/log/named
bind_main_config: /etc/bind/named.conf
bind_config_directory: /etc/bind
bind_log_directory: /var/log/bind
bind_package_names:
- bind9