c72da6157f
The bind class parameter defaults values are meant to be supplied via module data. Really, these ought to come through the bind::defaults class from hiera, but that class is currently the home of platform defaults which are not meant to be overridden by the user. This is a first step, maybe? A normalization for sure.
45 lines
1.1 KiB
Plaintext
45 lines
1.1 KiB
Plaintext
# This file is managed by puppet - changes will be lost
|
|
include "<%= @confdir %>/acls.conf";
|
|
include "<%= @confdir %>/keys.conf";
|
|
include "<%= @confdir %>/views.conf";
|
|
<%- if @statistics_port -%>
|
|
|
|
statistics-channels {
|
|
inet 127.0.0.1 port <%= @statistics_port %> allow { 127.0.0.1; };
|
|
};
|
|
<%- end -%>
|
|
|
|
options {
|
|
directory "<%= @cachedir %>";
|
|
<%- if @managed_keys_directory and @managed_keys_directory != '' -%>
|
|
managed-keys-directory "<%= @managed_keys_directory %>";
|
|
<%- end -%>
|
|
<%- if @forwarders and @forwarders != '' -%>
|
|
forwarders {
|
|
<%- Array(@forwarders).each do |forwarder| -%>
|
|
<%= forwarder %>;
|
|
<%- end -%>
|
|
};
|
|
<%- end -%>
|
|
<%- if @forward != '' -%>
|
|
forward <%= @forward %>;
|
|
<%- end -%>
|
|
auth-nxdomain <%= @auth_nxdomain ? 'yes' : 'no' %>;
|
|
listen-on-v6 { any; };
|
|
dnssec-enable <%= @dnssec ? 'yes' : 'no' %>;
|
|
<%- if @filter_ipv6 -%>
|
|
filter-aaaa-on-v4 yes;
|
|
<%- end -%>
|
|
<%- if @dnssec -%>
|
|
dnssec-validation yes;
|
|
dnssec-lookaside auto;
|
|
<%- end -%>
|
|
<%- if @version != '' -%>
|
|
version "<%= @version %>";
|
|
<%- end -%>
|
|
};
|
|
<%- if @include_local -%>
|
|
|
|
include "<%= @confdir %>/named.conf.local";
|
|
<%- end -%>
|