X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fnamed%2Ftemplates%2Fnamed.conf.options.erb;h=762039894e4e86149fe3a1ccf596e439016dc1e7;hb=942bbed848a6cd86bab53c9acfc72e95a3408332;hp=3375f74a017c7f1738b998e05428e68e71520009;hpb=ef80b973e522b4c683168556d04d699fdfd27b7a;p=mirror%2Fdsa-puppet.git diff --git a/modules/named/templates/named.conf.options.erb b/modules/named/templates/named.conf.options.erb index 3375f74a0..762039894 100644 --- a/modules/named/templates/named.conf.options.erb +++ b/modules/named/templates/named.conf.options.erb @@ -5,13 +5,12 @@ acl Nagios { <%= + roles = scope.lookupvar('site::roles') str = '' - scope.lookupvar('site::localinfo').keys.sort.each do |node| - if scope.lookupvar('site::localinfo')[node]['nagiosmaster'] + roles['nagiosmaster'].each do |node| scope.lookupvar('site::allnodeinfo')[node]['ipHostNumber'].each do |ip| str += "\t" + ip + "/32;\n" end - end end str-%> }; @@ -43,15 +42,12 @@ options { dnssec-validation yes; <% end -%> -<% if hostname == "senfl" -%> - rate-limit { - responses-per-second 25; - window 5; - slip 5; - qps-scale 250; - }; -<% end -%> + // Defaults are 100 and 10, causing lots and lots of tiny updates. + // This way, I hope, we'll get fewer (and thus bigger) updates. -- weasel + sig-signing-nodes 5000; + sig-signing-signatures 1000; + max-journal-size 100K; }; logging { @@ -67,6 +63,15 @@ logging { }; category queries { queries; }; category lame-servers { null; }; + + channel transfers { + file "/var/log/bind9/named-transfers.log" versions 4 size 40m; + print-time yes; + print-category yes; + }; + category xfer-out { transfers; }; + category notify { transfers; }; + }; - +include "/etc/bind/named.conf.puppet-shared-keys";