unkinben/puppet-bind
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Leave out dnssec-validation and dnssec-lookaside from named.conf when dnssec is disabled

Browse Source
This commit is contained in:
Doug Neal 2015-05-18 17:20:18 +01:00
parent 96d4d70c1a
commit bd7f25c6ce
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
templates/named.conf.erb
View File

@ -21,8 +21,10 @@ options {
auth-nxdomain <%= @auth_nxdomain ? 'yes' : 'no' %>; auth-nxdomain <%= @auth_nxdomain ? 'yes' : 'no' %>;
listen-on-v6 { any; }; listen-on-v6 { any; };
dnssec-enable <%= @dnssec ? 'yes' : 'no' %>; dnssec-enable <%= @dnssec ? 'yes' : 'no' %>;
dnssec-validation <%= @dnssec ? 'yes' : 'no' %>; <%- if @dnssec -%>
dnssec-lookaside <%= @dnssec ? 'auto' : 'no' %>; dnssec-validation yes;
dnssec-lookaside auto;
<%- end -%>
<%- if @version != '' -%> <%- if @version != '' -%>
version "<%= @version %>"; version "<%= @version %>";
<%- end -%> <%- end -%>