summaryrefslogtreecommitdiff
path: root/templates/named.conf.epp
diff options
context:
space:
mode:
authorHugo Hörnquist <hugo@lysator.liu.se>2023-06-09 14:38:51 +0200
committerHugo Hörnquist <hugo@lysator.liu.se>2023-06-09 14:38:51 +0200
commit7b3fed95f91a6877a88758558babf1bc549eeffc (patch)
tree85760a3c81ce5c35764140e507fae5d4db1befa9 /templates/named.conf.epp
parentRevert extra rndc-keyfile include. (diff)
downloaddns-7b3fed95f91a6877a88758558babf1bc549eeffc.tar.gz
dns-7b3fed95f91a6877a88758558babf1bc549eeffc.tar.xz
Place each zone and key declaration in own file.
This removes the dependency on concat, and allows for non-purging configurations.
Diffstat (limited to 'templates/named.conf.epp')
-rw-r--r--templates/named.conf.epp15
1 files changed, 15 insertions, 0 deletions
diff --git a/templates/named.conf.epp b/templates/named.conf.epp
index 9fe10b1..5a57452 100644
--- a/templates/named.conf.epp
+++ b/templates/named.conf.epp
@@ -1,3 +1,7 @@
+#
+# File managed by Puppet. Local changes WILL be overwritter',
+#
+
options {
directory "<%= $dns::directory %>";
forwarders { 8.8.8.8; 8.8.4.4; };
@@ -9,3 +13,14 @@ options {
allow-recursion { localnets; localhost; };
};
+
+<%# Equivalent to what rndc-confgen emits %>
+include "<%= $dns::rndc_key_file %>";
+
+controls {
+ inet 127.0.0.1 port 953 allow { 127.0.0.1; } keys { "rndc-key"; };
+};
+
+<%# Include remaining stuff %>
+include "<%= $dns::zoneconf_dir %>/*.conf";
+include "<%= $dns::keyconf_dir %>/*.conf";