blob: 359614c0f1cc58516cffcee349d8e055dce73e65 [file] [log] [blame]
Ales Komarek882ac7b2014-07-14 10:47:56 +02001
Ales Komarek77dbf032017-01-29 21:46:05 +01002============
3Bind formula
4============
Ales Komarek882ac7b2014-07-14 10:47:56 +02005
Ales Komarek77dbf032017-01-29 21:46:05 +01006BIND is open source software that enables you to publish your Domain Name System (DNS) information on the Internet, and to resolve DNS queries for your users. The name BIND stands for Berkeley Internet Name Domain”, because the software originated in the early 1980s at the University of California at Berkeley.
7
8Sample pillars
9==============
10
Filip Pytloun3b50b102017-03-14 12:46:11 +010011Server
12------
13
Ales Komarek77dbf032017-01-29 21:46:05 +010014.. code-block:: yaml
Ales Komarek882ac7b2014-07-14 10:47:56 +020015
Ales Komarek712343b2014-09-22 11:36:17 +020016 bind:
17 server:
18 enabled: true
Filip Pytloun5299d072016-10-06 11:23:21 +020019 key:
20 keyname:
21 secret: xyz
22 algorithm: hmac-sha512
Filip Pytloun57435b22016-10-06 11:30:16 +020023 server:
24 8.8.8.8:
25 keys:
26 - keyname
Filip Pytloun394922e2017-03-14 10:03:48 +010027 control:
28 local:
29 enabled: true
30 bind:
31 address: 127.0.0.1
32 port: 953
33 allow:
34 - 127.0.0.1
35 keys:
36 - xyz
Ales Komarek712343b2014-09-22 11:36:17 +020037 zone:
38 sub.domain.com:
Filip Pytloun52aa75d2016-02-26 17:14:54 +010039 ttl: 86400
40 root: "hostmaster@domain.com"
Ales Komarek712343b2014-09-22 11:36:17 +020041 type: master
Ales Komarekce71bf92014-09-30 11:35:30 +020042 records:
43 - name: @
44 type: A
45 ttl: 7200
46 value: 192.168.0.5
Martin Horakd6f624a2018-10-12 16:20:50 +020047 auto_records: true
48 # Allow autoload of host records from salt mine.
Ales Komarek712343b2014-09-22 11:36:17 +020049 1.168.192.in-addr.arpa:
50 type: master
Ales Komarekce71bf92014-09-30 11:35:30 +020051 notify: false
Filip Pytlounfaf8bbc2016-02-26 16:32:20 +010052 slave.domain.com:
53 type: slave
54 notify: true
55 masters:
Filip Pytloun52aa75d2016-02-26 17:14:54 +010056 # Masters must be specified by IP address
57 - 8.8.8.8
58 - 8.8.4.4
Filip Pytlounfaf8bbc2016-02-26 16:32:20 +010059 dnssec:
60 enabled: true
61 # Don't hide version
62 version: true
63 # Allow recursion, better don't on public dns servers
64 recursion:
65 hosts:
66 - localhost
Ales Komarekfbfa1682014-09-22 11:31:14 +020067
Filip Pytloun394922e2017-03-14 10:03:48 +010068You can use following command to generate key:
69
70.. code-block:: bash
71
72 dnssec-keygen -a HMAC-SHA512 -b 512 -n HOST -r /dev/urandom mykey
73
Filip Pytloun3b50b102017-03-14 12:46:11 +010074Client
75------
76
77.. code-block:: yaml
78
79 bind:
80 client:
81 enabled: true
82 option:
83 default:
84 server: localhost
85 port: 953
86 key: keyname
87 key:
88 keyname:
89 secret: xyz
90 algorithm: hmac-sha512
91 server:
92 8.8.8.8:
93 keys:
94 - keyname
95
Ales Komarek77dbf032017-01-29 21:46:05 +010096Read more
97=========
Ales Komarek2bf43322014-09-22 13:03:41 +020098
Ales Komarekce71bf92014-09-30 11:35:30 +020099* https://github.com/theforeman/puppet-dns
Filip Pytlounfaf8bbc2016-02-26 16:32:20 +0100100* https://help.ubuntu.com/community/BIND9ServerHowto
Ales Komarek77dbf032017-01-29 21:46:05 +0100101* https://www.isc.org/downloads/bind/
Filip Pytloun379fff02017-02-02 13:02:03 +0100102
103Documentation and Bugs
104======================
105
106To learn how to install and update salt-formulas, consult the documentation
107available online at:
108
109 http://salt-formulas.readthedocs.io/
110
111In the unfortunate event that bugs are discovered, they should be reported to
112the appropriate issue tracker. Use Github issue tracker for specific salt
113formula:
114
115 https://github.com/salt-formulas/salt-formula-bind/issues
116
117For feature requests, bug reports or blueprints affecting entire ecosystem,
118use Launchpad salt-formulas project:
119
120 https://launchpad.net/salt-formulas
121
122You can also join salt-formulas-users team and subscribe to mailing list:
123
124 https://launchpad.net/~salt-formulas-users
125
126Developers wishing to work on the salt-formulas projects should always base
127their work on master branch and submit pull request against specific formula.
128
129 https://github.com/salt-formulas/salt-formula-bind
130
131Any questions or feedback is always welcome so feel free to join our IRC
132channel:
133
134 #salt-formulas @ irc.freenode.net