Install and configure bind with dnssec
Find a file
2020-03-06 23:31:43 +01:00
defaults feat: refactor dnssec 2018-10-28 08:27:11 +01:00
handlers style: fix syntax for yamlint and ansible-lint 2019-02-18 22:36:09 +01:00
meta test: use ansible 2.9 and python3 2020-02-12 22:01:02 +01:00
molecule/default test: replace kitchen to molecule 2020-03-01 15:27:42 +01:00
tasks feat: use label in loop_control 2020-03-06 23:31:43 +01:00
templates test: use ansible 2.9 and python3 2020-02-12 22:01:02 +01:00
.gitignore test: replace kitchen to molecule 2020-03-01 15:27:42 +01:00
.rubocop.yml style: fix syntax for yamlint and ansible-lint 2019-02-18 22:36:09 +01:00
.travis.yml test: replace kitchen to molecule 2020-03-01 15:27:42 +01:00
.yamllint style: fix syntax for yamlint and ansible-lint 2019-02-18 22:36:09 +01:00
CHANGELOG.md feat: use label in loop_control 2020-03-06 23:31:43 +01:00
LICENSE fix: add year and name in license file 2018-03-17 11:25:42 +01:00
README.md test: replace kitchen to molecule 2020-03-01 15:27:42 +01:00

Ansible role: Bind

Version Build Status License

Install and configure bind with dnssec

Requirements

  • Ansible >= 2.7
  • bind version >= 9.8
  • Debian Stretch and Buster

Role variables

  • bind_options - hash general bind options
  • bind_zones - the dns zones
  • bind_dnssec - hash with dnssec configuration
  • bind_zones_subset array to use in extra-vars with the list zones to update
  • bind_listen_ipv4 - enable or disable ip v4 support (default: true)
  • bind_listen_ipv6 - enable or disable ip v6 support (default: true)

How to use

  • group_vars/dns-server/bind
bind_options:
  server-id: '"1"'

bind_zones:
  test.local:
    ns_primary: ns1.test.local
    mail: root@test.local
    serial: 2017092202
    options:
      auto-dnssec: maintain
      inline-signing: yes
    records:
      - { name: '@', type: ns, value: localhost. }
      - { name: hello, type: a, ttl: 5m, value: 1.2.3.4 }
      - { name: hello, type: caa, flag: 0, tag: issue, value: letsencrypt.org }
      - { name: hello, type: srv, priority: 0, weight: 5, port: 80, value: www }
  hello.local:
    ns_primary: ns1.hello.local
    mail: root@hello.local
    serial: 2017092201
    dnssec: no
    state: disabled
    records:
      - { name: '@', type: ns, value: localhost. }
      - { name: hello, type: a, value: 4.3.2.1 }
  • group_vars/dns-server/dnssec
bind_dnssec:
  test.local: 
    ksk:
      algorithm: 8
      digest: 3
      tag: 63805
      public_key: AwEAAbA3M8p+Cpf4k6mZKK8mb1eSIF8yDWXnpmI+i/Jm6CtIYMSigZ4B bmnN+r/SdpeeaPCP5RRZDO/6U0xs2zwPeLs=
      private_key: !vault |
        $ANSIBLE_VAULT;1.1;AES256
        33373964393565343638363964366133663235653931386664343435326362333031323130363362
        [...]
        65616337363634636365386166643133373331336333376430353663303563346236316532336532
        62376530646231346237
    zsk:
      algorithm: 8
      digest: 3
      tag: 11346
      public_key: AwEAAd9SkkrJQl4tOsK3zgtfZwmSJBzxU/NjApDZiKo6AVYVhDun6IIl Q/axOe901o+x/iUVwIs7cOMA5Z/h/8G8bq8=
      private_key: !vault |
        $ANSIBLE_VAULT;1.1;AES256
        37323036613735396364323363323464393731626466616262613033656264343765306238353934
        [...]
        38653039306430393564346636323966373265343032623430353765646639366536663566653836
        32643931393165643236

  • playbook
- hosts: dns-server
  roles:
    - bind 

Development

Test with molecule and docker

  • install docker
  • install python3 and python3-pip
  • install molecule and dependencies pip3 install molecule 'molecule[docker]' docker ansible-lint testinfra yamllint
  • run molecule test

License

Copyright (c) 2017 Adrien Waksberg

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.