70 lines
2.5 KiB
Django/Jinja
70 lines
2.5 KiB
Django/Jinja
# Alliance Boréale - PowerDNS Configuration
|
|
# Generated by Ansible - DO NOT EDIT MANUALLY
|
|
# Host: {{ inventory_hostname }}
|
|
# Role: {{ 'MASTER' if pdns_is_master else 'SLAVE' }}
|
|
# Date: {{ ansible_date_time.iso8601 }}
|
|
|
|
# ==========================================
|
|
# BACKEND
|
|
# ==========================================
|
|
launch=gpgsql
|
|
include-dir=/etc/powerdns/pdns.d
|
|
|
|
# ==========================================
|
|
# NETWORK
|
|
# ==========================================
|
|
local-address=0.0.0.0
|
|
local-port=53
|
|
local-ipv6=
|
|
|
|
# ==========================================
|
|
# MODE
|
|
# ==========================================
|
|
master={{ 'yes' if pdns_is_master else 'no' }}
|
|
slave={{ 'yes' if pdns_is_slave else 'no' }}
|
|
superslave={{ 'no' }}
|
|
|
|
# ==========================================
|
|
# API & WEBSERVER
|
|
# ==========================================
|
|
api={{ 'yes' if powerdns.api.enabled | default(true) else 'no' }}
|
|
api-key={{ powerdns.api.key | default('changeme') }}
|
|
|
|
webserver={{ 'yes' if powerdns.webserver.enabled | default(true) else 'no' }}
|
|
webserver-address={{ powerdns.webserver.address | default('0.0.0.0') }}
|
|
webserver-port={{ powerdns.webserver.port | default(8081) }}
|
|
webserver-allow-from={{ powerdns.webserver.allow_from | default('10.0.0.0/8') }}
|
|
|
|
# ==========================================
|
|
# DNSSEC
|
|
# ==========================================
|
|
dnssec={{ 'on' if powerdns.dnssec.enabled | default(true) else 'off' }}
|
|
|
|
# ==========================================
|
|
# LOGGING
|
|
# ==========================================
|
|
log-dns-queries={{ 'yes' if powerdns.logging.queries | default(false) else 'no' }}
|
|
log-dns-details={{ 'yes' if powerdns.logging.details | default(true) else 'no' }}
|
|
loglevel={{ powerdns.logging.level | default(4) }}
|
|
|
|
# ==========================================
|
|
# PERFORMANCE
|
|
# ==========================================
|
|
cache-ttl={{ powerdns.cache_ttl | default(20) }}
|
|
negquery-cache-ttl={{ powerdns.negquery_cache_ttl | default(60) }}
|
|
query-cache-ttl={{ powerdns.query_cache_ttl | default(20) }}
|
|
|
|
# ==========================================
|
|
# SECURITY
|
|
# ==========================================
|
|
setuid=pdns
|
|
setgid=pdns
|
|
chroot=/var/spool/powerdns
|
|
disable-axfr={{ 'no' }}
|
|
allow-axfr-ips={{ axfr.allow_from | join(',') if axfr.allow_from is defined else '127.0.0.1' }}
|
|
also-notify={{ notify.also_notify | join(',') if notify.also_notify is defined else '' }}
|
|
|
|
# ==========================================
|
|
# SOA
|
|
# ==========================================
|
|
default-soa-content=ns1.infra.{{ member.domain_primary }} admin.{{ member.domain_primary }} 0 3600 1800 1209600 3600
|