From 997bd105b508ef1cc804a26ebdfb742e3b729333 Mon Sep 17 00:00:00 2001
From: Aaron LI <aly@aaronly.me>
Date: Sat, 21 Sep 2019 08:58:07 +0800
Subject: dns: Add tags "unbound" and "nsd"
---
roles/dns/tasks/main.yml | 23 ++++++++++++++++++++---
1 file changed, 20 insertions(+), 3 deletions(-)
(limited to 'roles/dns')
diff --git a/roles/dns/tasks/main.yml b/roles/dns/tasks/main.yml
index b72b548..3f439e5 100644
--- a/roles/dns/tasks/main.yml
+++ b/roles/dns/tasks/main.yml
@@ -20,21 +20,25 @@
fetch -o /usr/local/etc/unbound/root.hints
"https://www.internic.net/domain/named.cache"
notify: reload-unbound
+ tags: unbound
- name: unbound - check existence of control key/cert
stat:
path: /usr/local/etc/unbound/unbound_control.key
register: stat_result
+ tags: unbound
- name: unbound - generate self-signed key/cert for control
command: unbound-control-setup
when: not stat_result.stat.exists
+ tags: unbound
- name: unbound - fetch initial anchor
command: >
unbound-anchor -a /usr/local/etc/unbound/root.key
-r /usr/local/etc/unbound/root.hints
ignore_errors: true
+ tags: unbound
- name: unbound - copy configuration
copy:
@@ -42,14 +46,17 @@
dest: /usr/local/etc/unbound/unbound.conf
validate: "unbound-checkconf %s"
notify: reload-unbound
+ tags: unbound
- name: unbound - enable and start service
command: rcenable unbound
+ tags: unbound
- name: setup resolv.conf
copy:
src: resolv.conf
dest: /etc/resolv.conf
+ tags: unbound
#
# NSD
@@ -58,20 +65,25 @@
stat:
path: /usr/local/etc/nsd/nsd_control.key
register: stat_result
+ tags: nsd
- name: NSD - generate self-signed key/cert for control
command: nsd-control-setup
when: not stat_result.stat.exists
+ tags: nsd
- name: NSD - create zones directory
file:
path: /usr/local/etc/nsd/zones
state: directory
+ tags: nsd
- name: NSD - get the list of zone files
set_fact:
zonefiles: "{{ lookup('fileglob', '../templates/zones/*.j2', wantlist=True) }}"
- tags: zones
+ tags:
+ - nsd
+ - zones
- debug: var=zonefiles
@@ -81,7 +93,9 @@
vars:
zonefile: "{{ item }}"
with_items: "{{ zonefiles }}"
- tags: zones
+ tags:
+ - nsd
+ - zones
# NOTE: requires variable `zonefiles`
- name: NSD - generate configuration
@@ -90,7 +104,10 @@
dest: /usr/local/etc/nsd/nsd.conf
validate: "nsd-checkconf %s"
notify: reload-nsd
- tags: zones
+ tags:
+ - nsd
+ - zones
- name: NSD - enable and start service
command: rcenable nsd
+ tags: nsd
--
cgit v1.2.2