blallo/full-dns
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Properly configure unbound to reply authoritatively

Browse Source
This commit is contained in:
sfigato 2020-08-31 16:19:26 +02:00
parent 3f58459e78
commit fd3d73ef8e
Signed by: blallo
GPG Key ID: 0CBE577C9B72DC3F
3 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
templates/nsd-satellite.conf.j2
View File

@ -3,6 +3,7 @@ zone:
name: {{ zone.name }}. name: {{ zone.name }}.
allow-notify: {{ star.vpn.address }} NOKEY allow-notify: {{ star.vpn.address }} NOKEY
request-xfr: AXFR {{ star.vpn.address }}@{{ star.nsd_port }} NOKEY request-xfr: AXFR {{ star.vpn.address }}@{{ star.nsd_port }} NOKEY
provide-xfr: 127.0.0.1 NOKEY
{% endfor -%} {% endfor -%}
# vim: set ft=yaml: # vim: set ft=yaml:

1
templates/nsd-star.conf.j2
View File

@ -6,6 +6,7 @@ zone:
{% for satellite in satellites -%} {% for satellite in satellites -%}
notify: {{ satellite.vpn.address }}@{{ satellite.nsd_port }} NOKEY notify: {{ satellite.vpn.address }}@{{ satellite.nsd_port }} NOKEY
provide-xfr: {{ satellite.vpn.address }} NOKEY provide-xfr: {{ satellite.vpn.address }} NOKEY
provide-xfr: 127.0.0.1 NOKEY
{% endfor %} {% endfor %}
{% endfor -%} {% endfor -%}

5
templates/unbound.conf.j2
View File

@ -23,11 +23,12 @@ server:
{% if server.verbosity is defined -%} {% if server.verbosity is defined -%}
verbosity: {{ server.verbosity }} verbosity: {{ server.verbosity }}
{% endif -%} {% endif -%}
tls-win-cert: yes
{% for zone in zones -%} {% for zone in zones -%}
forward-zone: auth-zone:
name: {{ zone.name }}. name: {{ zone.name }}.
forward-addr: {{ server.nsd_addr }}@{{ server.nsd_port }} master: {{ server.nsd_addr }}@{{ server.nsd_port }}
{% endfor %} {% endfor %}
# vim: set syntax=yaml et sw=0 ts=2 sts=0: # vim: set syntax=yaml et sw=0 ts=2 sts=0: