Include controls.conf as jinja2 template

Rather than using named.conf include, render the controls directly into
the config using jinja2 template include.
This commit is contained in:
Nicki Křížek 2026-04-01 18:25:28 +02:00
parent e34c3252d9
commit f4ca352bc8
40 changed files with 37 additions and 47 deletions

View file

@ -1,9 +0,0 @@
key rndc_key {
secret "1234abcd8765";
algorithm @DEFAULT_HMAC@;
};
controls {
inet 10.53.0.2 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
};

View file

@ -0,0 +1,4 @@
{% include "_common/rndc.key" %}
controls {
inet @ns.ip@ port @CONTROLPORT@ allow { any; } keys { rndc_key; };
};

View file

@ -1,2 +1 @@
/ns2/named.conf
/ns2/controls.conf

View file

@ -1 +0,0 @@
../../_common/controls.conf.in

View file

@ -7,7 +7,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
zone "." {
type hint;

View file

@ -8,7 +8,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
zone "." {
type hint;

View file

@ -8,7 +8,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
zone "." {
type hint;

View file

@ -8,7 +8,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
zone "." {
type hint;

View file

@ -8,7 +8,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
zone "." {
type hint;

View file

@ -8,7 +8,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
zone "." {
type hint;

View file

@ -10,7 +10,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
zone "." {
type hint;

View file

@ -10,7 +10,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
zone "." {
type hint;

View file

@ -10,7 +10,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
zone "." {
type hint;

View file

@ -13,7 +13,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
zone "." {
type hint;

View file

@ -19,7 +19,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
zone "." {
type hint;

View file

@ -13,7 +13,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
zone "." {
type hint;

View file

@ -7,7 +7,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -7,7 +7,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -7,7 +7,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -7,7 +7,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -7,7 +7,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -7,7 +7,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -9,7 +9,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -9,7 +9,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -9,7 +9,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -12,7 +12,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -19,7 +19,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -12,7 +12,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -8,7 +8,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -8,7 +8,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -21,7 +21,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
zone "." {
type hint;

View file

@ -8,7 +8,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
zone "." {
type hint;

View file

@ -8,7 +8,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
zone "." {
type hint;

View file

@ -7,7 +7,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -7,7 +7,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {

View file

@ -7,7 +7,7 @@ options {
dnssec-validation no;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
view "internal" {
allow-query-on { any; };

View file

@ -14,7 +14,6 @@ import pytest
pytestmark = pytest.mark.extra_artifacts(
[
"dig.out.*",
"ns2/controls.conf",
]
)

View file

@ -1 +0,0 @@
../../_common/controls.conf.in

View file

@ -14,7 +14,7 @@ options {
sig-signing-signatures 900;
};
include "controls.conf";
{% include "_common/controls.conf.j2" %}
dnssec-policy "optout" {
keys {

View file

@ -34,7 +34,6 @@ pytestmark = [
"ns2/*.signed",
"ns2/*.jnl",
"ns2/*.jbk",
"ns2/controls.conf",
"ns2/dsset-*",
"ns2/K*",
]