Compare commits

...

10 Commits

Author SHA1 Message Date
1cf2e7c923 fix: set owner/group to defaults
- defaults set via hiera, works over multiple OS's
2023-11-12 21:51:14 +11:00
Matthew
7de441e01f
updating metadata 2023-09-18 09:33:14 -05:00
Matthew
071766409a
updating metadata 2023-09-18 09:18:30 -05:00
Matthew
66000f897c
updating perms for files 2023-09-14 13:23:49 -05:00
Matthew
ce4188f385
updating file permissions for keys 2023-09-14 10:26:59 -05:00
Matthew
239ed01b8b
remove deprecated options from dnssec 2023-09-14 09:25:29 -05:00
Matthew
15c920ba99
add listen 2023-09-13 12:26:13 -05:00
Matthew
bc4a31d5a7
fix template maybe 2023-09-13 12:24:29 -05:00
Matthew
f8faf4fe90
moved dns sec as it is no longer used in bind9 2023-09-12 13:18:25 -05:00
Matthew
6fb0c5eb3c
i am rusty 2023-09-12 12:56:10 -05:00
5 changed files with 16 additions and 14 deletions

View File

@ -25,7 +25,7 @@ class bind::defaults (
$chroot_class = undef,
$chroot_dir = undef,
) {
unless is_bool($supported) {
unless $supported.is_a(Boolean) {
fail('Please ensure that the dependencies of the bind module are installed and working correctly')
}

View File

@ -4,7 +4,7 @@ define bind::key (
$secret = undef,
$secret_bits = 256,
$algorithm = 'hmac-sha256',
$owner = 'root',
$owner = $::bind::defaults::bind_user,
$group = $::bind::defaults::bind_group,
$keydir = $::bind::keydir::keydir,
$keyfile = undef,
@ -35,7 +35,7 @@ define bind::key (
ensure => present,
owner => $owner,
group => $group,
mode => '0640',
mode => '0400',
replace => $replace,
content => template('bind/key.conf.erb'),
}

View File

@ -2,9 +2,13 @@
class bind::keydir (
$keydir,
$owner = $::bind::defaults::bind_user,
$group = $::bind::defaults::bind_group,
) {
file { $keydir:
ensure => directory,
mode => '0755',
owner => $owner,
group => $group,
}
}

View File

@ -1,12 +1,12 @@
{
"name": "inkblot-bind",
"version": "7.4.0",
"author": "inkblot",
"author": "souldo",
"license": "Apache-2.0",
"summary": "ISC BIND name server",
"source": "git://github.com/inkblot/puppet-bind.git",
"project_page": "https://github.com/inkblot/puppet-bind",
"issues_url": "https://github.com/inkblot/puppet-bind/issues",
"summary": "ISC BIND name server <-- forked from inkblot",
"source": "git://github.com/matthewrstone/puppet-bind.git",
"project_page": "https://github.com/matthewrstone/puppet-bind",
"issues_url": "https://github.com/matthewrstone/puppet-bind/issues",
"tags": [ "bind", "dns", "dnssec", "nsupdate" ],
"operatingsystem_support": [
{
@ -15,7 +15,7 @@
},
{
"operatingsystem": "Ubuntu",
"operatingsystemrelease": [ "12.04", "14.04", "16.04" ]
"operatingsystemrelease": [ "22.04" ]
},
{
"operatingsystem": "CentOS",
@ -27,8 +27,7 @@
}
],
"dependencies": [
{ "name": "puppetlabs/stdlib", "version_requirement": ">= 4.15.0 < 5.0.0" },
{ "name": "puppetlabs/stdlib", "version_requirement": ">= 4.15.0 < 10.0.0" },
{ "name": "puppetlabs/concat", "version_requirement": ">= 2.2.1 < 5.0.0" }
],
"data_provider": "hiera"
]
}

View File

@ -27,14 +27,13 @@ options {
forward <%= @forward %>;
<%- end -%>
auth-nxdomain <%= @auth_nxdomain ? 'yes' : 'no' %>;
listen-on { any; };
listen-on-v6 { any; };
dnssec-enable <%= @dnssec ? 'yes' : 'no' %>;
<%- if @filter_ipv6 -%>
filter-aaaa-on-v4 yes;
<%- end -%>
<%- if @dnssec -%>
dnssec-validation yes;
dnssec-lookaside auto;
<%- if @isc_bind_keys -%>
bindkeys-file "<%= @isc_bind_keys %>";
<%- end -%>