Document the new autokeying hotness

This commit is contained in:
Nate Riffe 2015-01-18 10:37:35 -06:00
parent 9b1cbacee0
commit 58d79f807b

View File

@ -55,12 +55,18 @@ Puppet will manage the entire `named.conf` file and its includes. Most paramete
Creates a TSIG key file. Only the `secret` parameter is required, but it is recommended to explicitly supply the `algorithm` as well. The key file will be stored in `${::bind::confdir}/keys` with a filename derived from the title of the `bind::key` declaration. Creates a TSIG key file. Only the `secret` parameter is required, but it is recommended to explicitly supply the `algorithm` as well. The key file will be stored in `${::bind::confdir}/keys` with a filename derived from the title of the `bind::key` declaration.
bind::key { 'local-update': bind::key { 'local-update':
algorithm => 'hmac-sha256', algorithm => 'hmac-sha256', # default: 'hmac-sha256'
secret => '012345678901345678901234567890123456789=', secret => '012345678901345678901234567890123456789=',
owner => 'root', owner => 'root',
group => 'bind', group => 'bind',
} }
If no secret is specified, the bind::key define will generate one. The secret_bits parameter controls the size of the secret.
bind::key { 'local-update':
secret_bits => 512, # default: 256
}
###bind::acl ###bind::acl
Declares an acl in the server's configuration. The acl's name is the title of the `bind::acl` declaration. Declares an acl in the server's configuration. The acl's name is the title of the `bind::acl` declaration.