Setup for allow-query and allow-transfer
1 file changed
tree: a3755e84e6c48510a177429ee6b1e21fef88d9cc
  1. bind/
  2. debian/
  3. metadata/
  4. tests/
  5. .gitignore
  6. Makefile
  7. metadata.yml
  8. README.md
README.md

Bind DNS service

Sample pillars

bind:
  server:
    enabled: true
    key:
      keyname:
        secret: xyz
        algorithm: hmac-sha512
    server:
      8.8.8.8:
        keys:
          - keyname
    zone:
      sub.domain.com:
        ttl: 86400
        root: "hostmaster@domain.com"
        type: master
        records:
        - name: @
          type: A
          ttl: 7200
          value: 192.168.0.5
      1.168.192.in-addr.arpa:
        type: master
        notify: false
      slave.domain.com:
        type: slave
        notify: true
        masters:
          # Masters must be specified by IP address
          - 8.8.8.8
          - 8.8.4.4
    dnssec:
      enabled: true
    # Don't hide version
    version: true
    # Allow recursion, better don't on public dns servers
    recursion:
      hosts:
        - localhost

Read more