diff --git a/templates/named.conf.j2 b/templates/named.conf.j2 index b0d4793..3ffba05 100644 --- a/templates/named.conf.j2 +++ b/templates/named.conf.j2 @@ -5,12 +5,12 @@ include "/etc/bind/named.conf.default-zones"; include "/etc/bind/named.conf.local"; logging { - channel security_file { - file "/var/log/named/security.log" versions 3 size 30m; - severity dynamic; - print-time yes; - }; - category security { - security_file; - }; + channel security_file { + file "/var/log/named/security.log" versions 3 size 30m; + severity dynamic; + print-time yes; + }; + category security { + security_file; + }; }; diff --git a/templates/named.conf.local.j2 b/templates/named.conf.local.j2 index ea57501..6a9dc9d 100644 --- a/templates/named.conf.local.j2 +++ b/templates/named.conf.local.j2 @@ -2,14 +2,14 @@ {% for zone, value in bind_zones.iteritems() %} zone "{{ zone }}" IN { - type master; + type master; {% if 'dnssec' in value and value.dnssec %} - file "/etc/bind/zones/db.{{ zone }}.signed"; + file "/etc/bind/zones/db.{{ zone }}.signed"; {% else %} - file "/etc/bind/zones/db.{{ zone }}"; + file "/etc/bind/zones/db.{{ zone }}"; {% endif %} {% if 'allow_transfer' in value and value.dnssec %} - allow-transfer { + allow-transfer { {% for ip in value.allow_transfer %} {{ ip }}; {% endfor %} diff --git a/templates/named.conf.options.j2 b/templates/named.conf.options.j2 index 4ef0b97..b33733b 100644 --- a/templates/named.conf.options.j2 +++ b/templates/named.conf.options.j2 @@ -1,15 +1,15 @@ # {{ ansible_managed }} options { - directory "/var/cache/bind"; + directory "/var/cache/bind"; - dnssec-enable yes; - dnssec-validation yes; - dnssec-lookaside auto; + dnssec-enable yes; + dnssec-validation yes; + dnssec-lookaside auto; - auth-nxdomain no; # conform to RFC1035 - listen-on { {% if bind_listen_ipv4 %}any{% else %}none{% endif %}; }; - listen-on-v6 { {% if bind_listen_ipv6 %}any{% else %}none{% endif %}; }; + auth-nxdomain no; # conform to RFC1035 + listen-on { {% if bind_listen_ipv4 %}any{% else %}none{% endif %}; }; + listen-on-v6 { {% if bind_listen_ipv6 %}any{% else %}none{% endif %}; }; - version none; + version none; };