Disable ipv6 by default

defaults/main.yml

@@ -0,0 +1,2 @@
+---
+full_dns_ipv6_disabled: true

templates/main_zone.conf.j2

@@ -16,7 +16,7 @@ $TTL {{ main_zone.ttl|default(3600) }}
 				MX{% if record.opts is defined %}		{{ record.opts }}{% endif %}	{{ record.value }}
 {% endfor %}
 {{ server.hostname }}.		IN	A		{{ server.public_ip }}
-{% if server.public_ip6 is defined -%}
+{% if server.public_ip6 is defined and not full_dns_ipv6_disabled -%}
 {{ server.hostname }}.		IN	AAAA		{{ server.public_ip6 }}
 {% endif %}
 {% for satellite in satellites %}

templates/nsd.conf.j2

@@ -12,7 +12,11 @@ server:
   {% endif -%}
   port: {{ server.nsd_port }}
   do-ip4: {{ 'yes' if server.nsd_addr is defined else 'no' }}
-  do-ip6: {{ 'yes' if server.nsd_addr6 is defined else 'no' }}
+  {% if server.nsd_addr6 is defined and not full_dns_ipv6_disabled -%}
+  do-ip6: yes
+  {% else -%}
+  do-ip6: no
+  {% endif %}
   hide-version: yes
   refuse-any: {{ server.refuse_any|default('yes') }}
   log-only-syslog: yes

templates/unbound.conf.j2

@@ -13,7 +13,7 @@ server:
   {% else %}
   do-ip4: no
   {% endif -%}
-  {% if server.public_ip6 is defined %}
+  {% if server.public_ip6 is defined and not full_dns_ipv6_disabled %}
   do-ip6: yes
   interface: ::0
   access-control: ::0/0 allow_snoop