resmo / ansible-role-bind Goto Github PK

Please add Ubuntu/Debian as a dependency. This role will fail if attempted on RHEL/CentOS which is not obvious unless you look at the code.

It would be nice to be able to specify list of allow-recursion parameters.

If recursion is enabled there's no way to configure allow-recursion parameter.

There's no option to enable logging.

when i choose bind_masterzones_path other than masters, it breaks my nameserver config and bind denies to start.

this is because of this line:

- name: Copy master zone files
  copy: src={{ bind_masterzones_path }}/db.{{ item.name }} dest={{ bind_base_zones_path }}/{{bind_masterzones_path}} owner={{ bind_user }} group={{ bind_group }}

which will copy config files to dest=/var/lib/bind/masters which is a pre existing directory. if you change it to /var/lib/bind/XYZ where XYZ does not exist, it will copy the contents of your zone file to this file. So we should either pre create the directory or specify destination file name.

in the named.conf the named.conf.local is included, but this ansible role never place it on the destination server. when starting bind, it will fail to do so.

Hello Resmo,

If you change file "/etc/bind/slaves/db.{{ zone }}"; to file "/var/lib/bind/slaves/db.{{ zone }}" this will allow zone transfer without problems. This is because the apparmor is enabled. The best way for me is to have variable for filepath for zone.

If you accept pull requests I can submit to you patch.

Best!

README says: BSD

Meta says: MIT

The task that copies the zone files to server is:

- name: Copy master zone files
  copy: src={{ bind_masterzones_path }}/db.{{ item.name }} dest={{ bind_base_zones_path }}/{{bind_masterzones_path}} owner={{ bind_user }} group={{ bind_group }}
  with_items: "{{ bind_config_master_zones }}"
  notify: reload bind
  tags: bind-zones

It uses the variable bind_masterzones_path in the src param and in the dest param, so both paths are related. With default value (masters), local zones files must be placed in a 'masters' directory.

Using a different variable for src param you can place the files in other path not related to the destination path.