salt/pillar/role/dns/nsd.sls
Pratyush Desai 4de1d51fef
Some checks failed
ci/lysergic/push/pipeline Pipeline failed
Update nsd pillar role config
- add database disable switch under `config_data`
- remove `ip4-only` switch under `config_data` (it is host dependent)

Signed-off-by: Pratyush Desai <pratyush.desai@liberta.casa>
2023-02-20 02:43:56 +05:30

36 lines
1.1 KiB
Django/Jinja

nsd:
config_data:
server:
hide-version: 'yes'
verbosity: 2
database: ""
remote-control:
control-enable: 'yes'
control-interface: '/run/nsd/nsd.sock'
zones:
lysergic.dev:
zone_source: salt://zones/lysergic.dev.zone
allow-notify: 192.168.0.115 tsig.lysergic.dev.
request-xfr: 10.0.10.2@5353 tsig.lysergic.dev.
outgoing-interface: 192.168.0.160
psyched.dev:
zone_source: salt://zones/psyched.dev.zone
allow-notify: 192.168.0.115 tsig.psyched.dev.
request-xfr: 10.0.10.2@5353 tsig.psyched.dev.
outgoing-interface: 192.168.0.160
syscid.com:
zone_source: salt://zones/syscid.com.zone
allow-notify: 192.168.0.115 tsig.syscid.com.
request-xfr: 10.0.10.2@5353 tsig.syscid.com.
outgoing-interface: 192.168.0.160
keys:
tsig.lysergic.dev.:
algorithm: hmac-sha512
secret: ${'secret_nsd:tsig_key:lysergic_dev'}
tsig.syscid.com.:
algorithm: hmac-sha512
secret: ${'secret_nsd:tsig_key:syscid_com'}
tsig.psyched.dev.:
algorithm: hmac-sha512
secret: ${'secret_nsd:tsig_key:psyched_dev'}