diff options
| author | Aaron LI <aly@aaronly.me> | 2018-02-26 17:27:02 +0800 |
|---|---|---|
| committer | Aaron LI <aly@aaronly.me> | 2018-03-14 11:28:44 +0800 |
| commit | c10e1524e5b67fce4d8b17b0fa5ca39aac72c465 (patch) | |
| tree | 4d901258eaf250c17e3bf8022f59695bc5dd8afa /roles/dns | |
| parent | ee82cab09896865cf08326d8396c7275b21f8905 (diff) | |
| download | ansible-dfly-vps-c10e1524e5b67fce4d8b17b0fa5ca39aac72c465.tar.bz2 | |
dns: generate nsd.conf with domains and nameservers variables
Diffstat (limited to 'roles/dns')
| -rw-r--r-- | roles/dns/tasks/main.yml | 4 | ||||
| -rw-r--r-- | roles/dns/templates/nsd.conf.j2 | 17 |
2 files changed, 10 insertions, 11 deletions
diff --git a/roles/dns/tasks/main.yml b/roles/dns/tasks/main.yml index d6bfb2f..f414e59 100644 --- a/roles/dns/tasks/main.yml +++ b/roles/dns/tasks/main.yml @@ -68,11 +68,11 @@ path: /usr/local/etc/nsd/zones state: directory -- name: NSD - copy zone files +- name: NSD - generate zone files template: src: "zones/{{ item }}.zone.j2" dest: "/usr/local/etc/nsd/zones/{{ item }}.zone" - with_items: "{{ nsd.zones }}" + with_items: "{{ domains }}" notify: reload-nsd - name: NSD - enable and start service diff --git a/roles/dns/templates/nsd.conf.j2 b/roles/dns/templates/nsd.conf.j2 index f154796..0777bef 100644 --- a/roles/dns/templates/nsd.conf.j2 +++ b/roles/dns/templates/nsd.conf.j2 @@ -114,21 +114,20 @@ pattern: # nsd-control stats and stats_noreset. zonestats: "%s" - # Notify these slaves when the master zone changes - notify: 174.37.196.55 NOKEY # freedns.afraid.org - notify: 93.95.224.6 NOKEY # 1984hosting.com - - # Allow these IPs and TSIG to transfer zones. - provide-xfr: 174.37.196.55 NOKEY # freedns.afraid.org - provide-xfr: 93.95.224.6 NOKEY # 1984hosting.com + # Notify these slaves when the master zone changes, and allow them + # to transfer zones. +{% for server in nameservers %} + notify: {{ server.xfr_ip }} NOKEY # {{ server.name }} + provide-xfr: {{ server.xfr_ip }} NOKEY # {{ server.name }} +{% endfor %} # Fixed zone entries. Here you can config zones that cannot be deleted. # Zones that are dynamically added and deleted are put in the zonelist file. # -{% for zone in nsd.zones %} +{% for domain in domains %} zone: - name: "{{ zone }}" + name: "{{ domain }}" include-pattern: "stealth_zones" {% endfor %} |