puppet-prod/hieradata/roles/infra/dns/master.yaml
Ben Vincent c996c9b7e3 fix: enable dynamic/tsig updates
- add eyaml to hiera.yaml
- consolidate all paths into single tree
- change to new profiles::dns::client wrapper
- change to new profiles::dns::record wrapper
- change to use concat method to build zone file
2023-11-16 21:40:16 +11:00

39 lines
900 B
YAML

---
profiles::dns::master::nameservers:
- prodinf01n23.main.unkin.net
- prodinf01n24.main.unkin.net
profiles::dns::master::acls:
acl-main.unkin.net:
addresses:
- 198.18.17.0/24
profiles::dns::master::zones:
main.unkin.net:
domain: 'main.unkin.net'
zone_type: 'master'
dynamic: false
ns_notify: true
source: '/var/named/sources/main.unkin.net.conf'
17.18.198.in-addr.arpa:
domain: '17.18.198.in-addr.arpa'
zone_type: 'master'
dynamic: false
ns_notify: true
source: '/var/named/sources/17.18.198.in-addr.arpa.conf'
profiles::dns::master::views:
master-zones:
recursion: false
zones:
- main.unkin.net
- 17.18.198.in-addr.arpa
match_clients:
- acl-main.unkin.net
profiles::dns::master::keys:
rndskey:
secret_bits: 512
algorithm: hmac-sha256
secret: "%{lookup('profiles::dns::master::secret')}"