Compare commits

..

10 Commits

Author SHA1 Message Date
1cf2e7c923 fix: set owner/group to defaults
- defaults set via hiera, works over multiple OS's
2023-11-12 21:51:14 +11:00
Matthew
7de441e01f
updating metadata 2023-09-18 09:33:14 -05:00
Matthew
071766409a
updating metadata 2023-09-18 09:18:30 -05:00
Matthew
66000f897c
updating perms for files 2023-09-14 13:23:49 -05:00
Matthew
ce4188f385
updating file permissions for keys 2023-09-14 10:26:59 -05:00
Matthew
239ed01b8b
remove deprecated options from dnssec 2023-09-14 09:25:29 -05:00
Matthew
15c920ba99
add listen 2023-09-13 12:26:13 -05:00
Matthew
bc4a31d5a7
fix template maybe 2023-09-13 12:24:29 -05:00
Matthew
f8faf4fe90
moved dns sec as it is no longer used in bind9 2023-09-12 13:18:25 -05:00
Matthew
6fb0c5eb3c
i am rusty 2023-09-12 12:56:10 -05:00
5 changed files with 16 additions and 14 deletions

View File

@ -25,7 +25,7 @@ class bind::defaults (
$chroot_class = undef, $chroot_class = undef,
$chroot_dir = undef, $chroot_dir = undef,
) { ) {
unless is_bool($supported) { unless $supported.is_a(Boolean) {
fail('Please ensure that the dependencies of the bind module are installed and working correctly') fail('Please ensure that the dependencies of the bind module are installed and working correctly')
} }

View File

@ -4,7 +4,7 @@ define bind::key (
$secret = undef, $secret = undef,
$secret_bits = 256, $secret_bits = 256,
$algorithm = 'hmac-sha256', $algorithm = 'hmac-sha256',
$owner = 'root', $owner = $::bind::defaults::bind_user,
$group = $::bind::defaults::bind_group, $group = $::bind::defaults::bind_group,
$keydir = $::bind::keydir::keydir, $keydir = $::bind::keydir::keydir,
$keyfile = undef, $keyfile = undef,
@ -35,7 +35,7 @@ define bind::key (
ensure => present, ensure => present,
owner => $owner, owner => $owner,
group => $group, group => $group,
mode => '0640', mode => '0400',
replace => $replace, replace => $replace,
content => template('bind/key.conf.erb'), content => template('bind/key.conf.erb'),
} }

View File

@ -2,9 +2,13 @@
class bind::keydir ( class bind::keydir (
$keydir, $keydir,
$owner = $::bind::defaults::bind_user,
$group = $::bind::defaults::bind_group,
) { ) {
file { $keydir: file { $keydir:
ensure => directory, ensure => directory,
mode => '0755', mode => '0755',
owner => $owner,
group => $group,
} }
} }

View File

@ -1,12 +1,12 @@
{ {
"name": "inkblot-bind", "name": "inkblot-bind",
"version": "7.4.0", "version": "7.4.0",
"author": "inkblot", "author": "souldo",
"license": "Apache-2.0", "license": "Apache-2.0",
"summary": "ISC BIND name server", "summary": "ISC BIND name server <-- forked from inkblot",
"source": "git://github.com/inkblot/puppet-bind.git", "source": "git://github.com/matthewrstone/puppet-bind.git",
"project_page": "https://github.com/inkblot/puppet-bind", "project_page": "https://github.com/matthewrstone/puppet-bind",
"issues_url": "https://github.com/inkblot/puppet-bind/issues", "issues_url": "https://github.com/matthewrstone/puppet-bind/issues",
"tags": [ "bind", "dns", "dnssec", "nsupdate" ], "tags": [ "bind", "dns", "dnssec", "nsupdate" ],
"operatingsystem_support": [ "operatingsystem_support": [
{ {
@ -15,7 +15,7 @@
}, },
{ {
"operatingsystem": "Ubuntu", "operatingsystem": "Ubuntu",
"operatingsystemrelease": [ "12.04", "14.04", "16.04" ] "operatingsystemrelease": [ "22.04" ]
}, },
{ {
"operatingsystem": "CentOS", "operatingsystem": "CentOS",
@ -27,8 +27,7 @@
} }
], ],
"dependencies": [ "dependencies": [
{ "name": "puppetlabs/stdlib", "version_requirement": ">= 4.15.0 < 5.0.0" }, { "name": "puppetlabs/stdlib", "version_requirement": ">= 4.15.0 < 10.0.0" },
{ "name": "puppetlabs/concat", "version_requirement": ">= 2.2.1 < 5.0.0" } { "name": "puppetlabs/concat", "version_requirement": ">= 2.2.1 < 5.0.0" }
], ]
"data_provider": "hiera"
} }

View File

@ -27,14 +27,13 @@ options {
forward <%= @forward %>; forward <%= @forward %>;
<%- end -%> <%- end -%>
auth-nxdomain <%= @auth_nxdomain ? 'yes' : 'no' %>; auth-nxdomain <%= @auth_nxdomain ? 'yes' : 'no' %>;
listen-on { any; };
listen-on-v6 { any; }; listen-on-v6 { any; };
dnssec-enable <%= @dnssec ? 'yes' : 'no' %>;
<%- if @filter_ipv6 -%> <%- if @filter_ipv6 -%>
filter-aaaa-on-v4 yes; filter-aaaa-on-v4 yes;
<%- end -%> <%- end -%>
<%- if @dnssec -%> <%- if @dnssec -%>
dnssec-validation yes; dnssec-validation yes;
dnssec-lookaside auto;
<%- if @isc_bind_keys -%> <%- if @isc_bind_keys -%>
bindkeys-file "<%= @isc_bind_keys %>"; bindkeys-file "<%= @isc_bind_keys %>";
<%- end -%> <%- end -%>