aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--roles/space_server/tasks/named.yml35
-rw-r--r--roles/space_server/templates/dhcp.zone.j22
-rw-r--r--roles/space_server/templates/named.conf.j2 (renamed from roles/space_server/files/named.conf)25
3 files changed, 53 insertions, 9 deletions
diff --git a/roles/space_server/tasks/named.yml b/roles/space_server/tasks/named.yml
index 243bf3e..519b5d4 100644
--- a/roles/space_server/tasks/named.yml
+++ b/roles/space_server/tasks/named.yml
@@ -1,21 +1,40 @@
---
-- name: Create local zones
+- name: Create s zone
template:
- dest: '/etc/named/{{ item }}'
- src: '{{ item }}.j2'
+ dest: '/etc/named/s.zone'
+ src: s.zone.j2
owner: root
group: named
mode: 0644
- with_items:
- - 's.zone'
- - 'ipv4.rev.zone'
+ notify:
+ - restart named
+
+- name: Create dhcp zone
+ template:
+ dest: '/var/named/dynamic/dhcp.zone'
+ src: dhcp.zone.j2
+ owner: named
+ group: named
+ mode: 0644
+ force: no
+ notify:
+ - restart named
+
+- name: Create ipv4 reverse dns zone
+ template:
+ dest: '/var/named/dynamic/ipv4.rev.zone'
+ src: ipv4.rev.zone.j2
+ owner: named
+ group: named
+ mode: 0644
+ force: no
notify:
- restart named
- name: Configure named
- copy:
+ template:
dest: '/etc/named.conf'
- src: named.conf
+ src: named.conf.j2
owner: root
group: named
mode: 0640
diff --git a/roles/space_server/templates/dhcp.zone.j2 b/roles/space_server/templates/dhcp.zone.j2
new file mode 100644
index 0000000..e6b2b40
--- /dev/null
+++ b/roles/space_server/templates/dhcp.zone.j2
@@ -0,0 +1,2 @@
+dhcp. 600 IN SOA space.labitat.dk. esmil.labitat.dk. 2019040101 7200 3600 604800 86400
+dhcp. 600 IN NS space.labitat.dk.
diff --git a/roles/space_server/files/named.conf b/roles/space_server/templates/named.conf.j2
index 0659a3b..0314545 100644
--- a/roles/space_server/files/named.conf
+++ b/roles/space_server/templates/named.conf.j2
@@ -86,6 +86,13 @@ acl local {
2a01:4262:1ab:c::/64; // member wireless
2a01:4262:1ab:f::/64; // member nat64
};
+{% if ddns_secret is defined %}
+
+key dhcpupdate {
+ algorithm {{ ddns_secret.algorithm }};
+ secret "{{ ddns_secret.key }}";
+};
+{% endif %}
zone "." IN {
type hint;
@@ -96,14 +103,30 @@ zone "s" IN {
type master;
file "/etc/named/s.zone";
allow-query { local; };
+ allow-update { none; };
+ allow-transfer { none; };
+};
+{% if ddns_secret is defined %}
+
+zone "dhcp" IN {
+ type master;
+ file "dynamic/dhcp.zone";
+ allow-query { local; };
+ allow-update { key dhcpupdate; };
allow-transfer { none; };
+ notify no;
};
+{% endif %}
zone "42.10.in-addr.arpa" IN {
type master;
- file "/etc/named/ipv4.rev.zone";
+ file "dynamic/ipv4.rev.zone";
allow-query { local; };
+{% if ddns_secret is defined %}
+ allow-update { key dhcpupdate; };
+{% endif %}
allow-transfer { none; };
+ notify no;
};
include "/etc/named.rfc1912.zones";