X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fnamed%2Ftemplates%2Fnamed.conf.options.erb;h=762039894e4e86149fe3a1ccf596e439016dc1e7;hb=96999fa797b51d5701a6b32f23ffbf8be008fdfa;hp=8bc2f87d1065dcbf2df9439080e1f680a858a785;hpb=b783bf06da0040034c506ec529a625ed074b1c01;p=mirror%2Fdsa-puppet.git diff --git a/modules/named/templates/named.conf.options.erb b/modules/named/templates/named.conf.options.erb index 8bc2f87d1..762039894 100644 --- a/modules/named/templates/named.conf.options.erb +++ b/modules/named/templates/named.conf.options.erb @@ -5,13 +5,12 @@ acl Nagios { <%= + roles = scope.lookupvar('site::roles') str = '' - scope.lookupvar('site::localinfo').keys.sort.each do |node| - if scope.lookupvar('site::localinfo')[node]['nagiosmaster'] + roles['nagiosmaster'].each do |node| scope.lookupvar('site::allnodeinfo')[node]['ipHostNumber'].each do |ip| str += "\t" + ip + "/32;\n" end - end end str-%> }; @@ -43,15 +42,12 @@ options { dnssec-validation yes; <% end -%> -<% if %w{senfl ravel orff diamond rietz}.include?(hostname) -%> - rate-limit { - responses-per-second 25; - window 5; - slip 5; - qps-scale 250; - }; -<% end -%> + // Defaults are 100 and 10, causing lots and lots of tiny updates. + // This way, I hope, we'll get fewer (and thus bigger) updates. -- weasel + sig-signing-nodes 5000; + sig-signing-signatures 1000; + max-journal-size 100K; }; logging { @@ -67,6 +63,15 @@ logging { }; category queries { queries; }; category lame-servers { null; }; + + channel transfers { + file "/var/log/bind9/named-transfers.log" versions 4 size 40m; + print-time yes; + print-category yes; + }; + category xfer-out { transfers; }; + category notify { transfers; }; + }; - +include "/etc/bind/named.conf.puppet-shared-keys";