mirror of
https://github.com/iiab/iiab.git
synced 2025-02-13 11:42:08 +00:00
92 lines
4.6 KiB
YAML
92 lines
4.6 KiB
YAML
- name: Install named packages
|
|
package: name={{ item }}
|
|
state=present
|
|
with_items:
|
|
- bind9
|
|
- bind9utils
|
|
when: is_debian
|
|
tags:
|
|
- download
|
|
|
|
- name: Install named packages
|
|
package: name={{ item }}
|
|
state=present
|
|
with_items:
|
|
- bind
|
|
- bind-utils
|
|
when: not is_debian
|
|
tags:
|
|
- download
|
|
|
|
# or we have to change the serial number in the config files.
|
|
- name: Stop named before copying files
|
|
service: name={{ dns_service }} state=stopped
|
|
when: not installing
|
|
|
|
- name: Set folder permission
|
|
file: path={{ item }}
|
|
owner={{ dns_user }}
|
|
group=root
|
|
mode=0755
|
|
state=directory
|
|
with_items:
|
|
- /var/named-xs
|
|
- /var/named-xs/data
|
|
- /etc/sysconfig/olpc-scripts/domain_config.d
|
|
|
|
- name: Configure named
|
|
template: src={{ item.src }}
|
|
dest={{ item.dest }}
|
|
owner={{ item.owner }}
|
|
group=root
|
|
mode={{ item.mode }}
|
|
with_items:
|
|
- { src: 'named/named-xs.conf.j2', dest: '/etc/named-xs.conf', owner: "root" , mode: '0644' }
|
|
- { src: 'named/named.j2', dest: '/etc/sysconfig/named', owner: "root" , mode: '0644' }
|
|
- { src: 'named/named', dest: '/etc/sysconfig/olpc-scripts/domain_config.d/named', owner: "root" , mode: '0644' }
|
|
- { src: 'named/localdomain.zone', dest: '/var/named-xs/localdomain.zone',owner: "{{ dns_user }}" , mode: '0644' }
|
|
- { src: 'named/localhost.zone', dest: '/var/named-xs/localhost.zone', owner: "{{ dns_user }}" , mode: '0644' }
|
|
- { src: 'named/named.broadcast', dest: '/var/named-xs/named.broadcast', owner: "{{ dns_user }}" , mode: '0644'}
|
|
- { src: 'named/named.ip6.local', dest: '/var/named-xs/named.ip6.local' , owner: "{{ dns_user }}" , mode: '0644'}
|
|
- { src: 'named/named.local', dest: '/var/named-xs/named.local' , owner: "{{ dns_user }}" , mode: '0644'}
|
|
- { src: 'named/named.rfc1912.zones', dest: '/var/named-xs/named.rfc1912.zones' , owner: "{{ dns_user }}" , mode: '0644'}
|
|
- { src: 'named/named.root', dest: '/var/named-xs/named.root' , owner: "{{ dns_user }}" , mode: '0644'}
|
|
- { src: 'named/named.root.hints', dest: '/var/named-xs/named.root.hints' , owner: "{{ dns_user }}" , mode: '0644'}
|
|
- { src: 'named/named.zero', dest: '/var/named-xs/named.zero' , owner: "{{ dns_user }}" , mode: '0644'}
|
|
- { src: 'named/school.external.zone.db', dest: '/var/named-xs/school.external.zone.db' , owner: "{{ dns_user }}" , mode: '0644'}
|
|
- { src: 'named/school.internal.zone.16.in-addr.db.j2', dest: '/var/named-xs/school.internal.zone.16.in-addr.db' , owner: "{{ dns_user }}" , mode: '0644'}
|
|
- { src: 'named/school.internal.zone.32.in-addr.db.j2', dest: '/var/named-xs/school.internal.zone.32.in-addr.db' , owner: "{{ dns_user }}" , mode: '0644'}
|
|
- { src: 'named/school.internal.zone.48.in-addr.db.j2', dest: '/var/named-xs/school.internal.zone.48.in-addr.db' , owner: "{{ dns_user }}" , mode: '0644'}
|
|
# the following two files are not writeable by named, but bind 9.4 cannot discover that fact correctly
|
|
- { src: 'named/school.internal.zone.db', dest: '/var/named-xs/school.internal.zone.db' , owner: "root" , mode: '0644'}
|
|
- { src: 'named/school.local.zone.db', dest: '/var/named-xs/school.local.zone.db' , owner: "root" , mode: '0644'}
|
|
- { src: 'named/school.internal.zone.in-addr.db.j2', dest: '/var/named-xs/school.internal.zone.in-addr.db' , owner: "{{ dns_user }}" , mode: '0644'}
|
|
- { src: 'named/dummy', dest: '/var/named-xs/data/dummy' , owner: "{{ dns_user }}" , mode: '0644'}
|
|
- { src: 'named/named.blackhole', dest: '/var/named-xs/named.blackhole' , owner: "{{ dns_user }}" , mode: '0644'}
|
|
|
|
- name: substitute our unit file which uses $OPTIONS from sysconfig
|
|
template: src=named/{{ dns_service }}.service
|
|
dest=/etc/systemd/system/{{ dns_service }}.service
|
|
mode=0644
|
|
|
|
- name: The dns-jail redirect requires the named.blackhole,disabling recursion
|
|
# in named-xs.conf, and the redirection of 404 error documents to /
|
|
template: src=named/dns-jail.conf dest=/etc/{{ apache_config_dir }}/
|
|
when: dns_jail_enabled
|
|
|
|
- name: Separate enabling required for debian
|
|
file: src=/etc/{{ apache_config_dir }}/dns-jail.conf
|
|
path=/etc/{{ apache_service }}/sites-enabled/dns-jail.conf
|
|
state=link
|
|
when: is_debian and dns_jail_enabled
|
|
|
|
- name: Separate enabling/disabling required for debian
|
|
file: src=/etc/{{ apache_config_dir }}/dns-jail.conf
|
|
path=/etc/{{ apache_service }}/sites-enabled/dns-jail.conf
|
|
state=absent
|
|
when: is_debian and not dns_jail_enabled
|
|
|
|
- name: Separate enabling/disabling required for non debian
|
|
file: path=/etc/{{ apache_config_dir }}/dns-jail.conf
|
|
state=absent
|
|
when: not is_debian and not dns_jail_enabled
|