Compare commits

...

3 Commits

Author SHA1 Message Date
4de1d51fef Update nsd pillar role config
Some checks failed
ci/lysergic/push/pipeline Pipeline failed
- add database disable switch under `config_data`
- remove `ip4-only` switch under `config_data` (it is host dependent)

Signed-off-by: Pratyush Desai <pratyush.desai@liberta.casa>
2023-02-20 02:43:56 +05:30
5d5ac9b075 Add pillar ids for nsd
Some checks failed
ci/lysergic/push/pipeline Pipeline failed
- add config data for nsd.

Signed-off-by: Pratyush Desai <pratyush.desai@liberta.casa>
2023-02-20 02:30:11 +05:30
eab80e0573 add nsd pillar
All checks were successful
ci/lysergic/push/pipeline Pipeline was successful
2023-02-19 20:46:39 +05:30
7 changed files with 60 additions and 0 deletions

View File

@ -2,6 +2,7 @@
- firewalld
- keepalived
- nginx
- nsd
- openssh
- postfix
- prometheus

View File

@ -0,0 +1,6 @@
nsd:
config_data:
ip-address:
- 127.0.0.1@5353
- 192.168.0.160@5353
ip4-only: 'yes'

View File

@ -0,0 +1,5 @@
nsd:
config_data:
ip-address:
- 127.0.0.1@5353
- 192.168.20.3@5353

View File

@ -0,0 +1,6 @@
nsd:
config_data:
ip-address:
- 127.0.0.3
- 192.168.0.115@5353
ip4-only: 'yes'

View File

@ -0,0 +1,5 @@
nsd:
config_data:
ip-address:
- 127.0.0.1@5353
- 10.0.10.2@5353

35
pillar/role/dns/nsd.sls Normal file
View File

@ -0,0 +1,35 @@
nsd:
config_data:
server:
hide-version: 'yes'
verbosity: 2
database: ""
remote-control:
control-enable: 'yes'
control-interface: '/run/nsd/nsd.sock'
zones:
lysergic.dev:
zone_source: salt://zones/lysergic.dev.zone
allow-notify: 192.168.0.115 tsig.lysergic.dev.
request-xfr: 10.0.10.2@5353 tsig.lysergic.dev.
outgoing-interface: 192.168.0.160
psyched.dev:
zone_source: salt://zones/psyched.dev.zone
allow-notify: 192.168.0.115 tsig.psyched.dev.
request-xfr: 10.0.10.2@5353 tsig.psyched.dev.
outgoing-interface: 192.168.0.160
syscid.com:
zone_source: salt://zones/syscid.com.zone
allow-notify: 192.168.0.115 tsig.syscid.com.
request-xfr: 10.0.10.2@5353 tsig.syscid.com.
outgoing-interface: 192.168.0.160
keys:
tsig.lysergic.dev.:
algorithm: hmac-sha512
secret: ${'secret_nsd:tsig_key:lysergic_dev'}
tsig.syscid.com.:
algorithm: hmac-sha512
secret: ${'secret_nsd:tsig_key:syscid_com'}
tsig.psyched.dev.:
algorithm: hmac-sha512
secret: ${'secret_nsd:tsig_key:psyched_dev'}

2
salt/role/dns/nsd.sls Normal file
View File

@ -0,0 +1,2 @@
include:
- nsd