X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fnamed%2Ftemplates%2Fnamed.conf.options.erb;h=630058bb286f0a1ccbae4070975c961c2f46df23;hb=3d1adf1668edc6ed72c7dd9710c6d9142fa5d54b;hp=84469dfffc71b38738d50fa1ea573f0fb311cc11;hpb=483f9c11e2419da2aa3fe83f306a2adf5f6938ef;p=mirror%2Fdsa-puppet.git diff --git a/modules/named/templates/named.conf.options.erb b/modules/named/templates/named.conf.options.erb index 84469dfff..630058bb2 100644 --- a/modules/named/templates/named.conf.options.erb +++ b/modules/named/templates/named.conf.options.erb @@ -6,9 +6,9 @@ acl Nagios { <%= str = '' - localinfo.keys.sort.each do |node| - if localinfo[node]['nagiosmaster'] - keyinfo[node]['ipHostNumber'].each do |ip| + scope.lookupvar('site::localinfo').keys.sort.each do |node| + if scope.lookupvar('site::localinfo')[node]['nagiosmaster'] + scope.lookupvar('site::allnodeinfo')[node]['ipHostNumber'].each do |ip| str += "\t" + ip + "/32;\n" end end @@ -20,7 +20,8 @@ options { directory "/var/cache/bind"; auth-nxdomain no; # conform to RFC1035 - listen-on-v6 { any; }; + listen-on { ! 127.0.0.1; any; }; + listen-on-v6 { ! ::1; any; }; allow-transfer { none; }; allow-update { none; }; @@ -30,9 +31,6 @@ options { <%= allowed='Nagios; ' - if classes.include?('named::secondary') or classes.include?('named::recursor') - allowed += 'localnets; ' - end str = "\tallow-recursion { " + allowed + " };\n" str += "\tallow-query { " + allowed + " };\n" @@ -40,7 +38,7 @@ options { str -%> -<% if classes.include?('named::secondary') or classes.include?('named::geodns') -%> +<% if classes.include?('named::authoritative') or classes.include?('named::geodns') -%> dnssec-enable yes; dnssec-validation yes; <% end -%>