blallo/full-dns
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Disable ipv6 by default

Browse Source
This commit is contained in:
sfigato 2022-03-11 11:43:32 +01:00
parent 8038ad8f2c
commit 4f8e2c9e7a
Signed by: blallo
GPG Key ID: 0CBE577C9B72DC3F
4 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml Normal file
View File

@ -0,0 +1,2 @@
---
full_dns_ipv6_disabled: true

2
templates/main_zone.conf.j2
View File

@ -16,7 +16,7 @@ $TTL {{ main_zone.ttl|default(3600) }}
MX{% if record.opts is defined %} {{ record.opts }}{% endif %} {{ record.value }}
{% endfor %}
{{ server.hostname }}. IN A {{ server.public_ip }}
{% if server.public_ip6 is defined -%}
{% if server.public_ip6 is defined and not full_dns_ipv6_disabled -%}
{{ server.hostname }}. IN AAAA {{ server.public_ip6 }}
{% endif %}
{% for satellite in satellites %}

6
templates/nsd.conf.j2
View File

@ -12,7 +12,11 @@ server:
{% endif -%}
port: {{ server.nsd_port }}
do-ip4: {{ 'yes' if server.nsd_addr is defined else 'no' }}
do-ip6: {{ 'yes' if server.nsd_addr6 is defined else 'no' }}
{% if server.nsd_addr6 is defined and not full_dns_ipv6_disabled -%}
do-ip6: yes
{% else -%}
do-ip6: no
{% endif %}
hide-version: yes
refuse-any: {{ server.refuse_any|default('yes') }}
log-only-syslog: yes

2
templates/unbound.conf.j2
View File

@ -13,7 +13,7 @@ server:
{% else %}
do-ip4: no
{% endif -%}
{% if server.public_ip6 is defined %}
{% if server.public_ip6 is defined and not full_dns_ipv6_disabled %}
do-ip6: yes
interface: ::0
access-control: ::0/0 allow_snoop