X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fnamed%2Ftemplates%2Fnamed.conf.options.erb;h=a2f309e27f2f97542b5bd149847d7959a96144cc;hb=4a2bc172d444c83cb785db33651b69434957aad1;hp=5dec7ba1f3c42bc9af2d9dd535d338b884ae401c;hpb=0908741048684a3f0d143144b82fab87095a42a6;p=mirror%2Fdsa-puppet.git diff --git a/modules/named/templates/named.conf.options.erb b/modules/named/templates/named.conf.options.erb index 5dec7ba1f..a2f309e27 100644 --- a/modules/named/templates/named.conf.options.erb +++ b/modules/named/templates/named.conf.options.erb @@ -17,43 +17,43 @@ acl Nagios { }; options { - directory "/var/cache/bind"; + directory "/var/cache/bind"; - auth-nxdomain no; # conform to RFC1035 - listen-on-v6 { any; }; + auth-nxdomain no; # conform to RFC1035 + listen-on-v6 { any; }; - allow-transfer { none; }; - allow-update { none; }; -<%= if classes.include?('named::geodns') -%> - blackhole { 192.168.0.0/16; 10.0.0.0/8; 172.16.0.0/12; }; -<%= end -%> + allow-transfer { none; }; + allow-update { none; }; +<% if classes.include?("named::geodns") -%> + blackhole { 192.168.0.0/16; 10.0.0.0/8; 172.16.0.0/12; }; +<% end -%> <%= allowed='Nagios; ' - if classes.include?('named::secondary') + if classes.include?('named::secondary') or classes.include?('named::recursor') allowed += 'localnets; ' end - str = "allow-recursion { " + allowed + " };\n" - str += "allow-query { " + allowed + " };\n" + str = "\tallow-recursion { " + allowed + " };\n" + str += "\tallow-query { " + allowed + " };\n" str -%> -<%= if classes.include?('named::secondary') -%> +<% if classes.include?('named::secondary') -%> dnssec-enable yes; dnssec-validation yes; -<%= end -%> +<% end -%> }; logging { channel queries { -<%= if classes.include?('named::geodns') -%> +<% if classes.include?('named::geodns') -%> file "/var/log/bind9/geoip-query.log" versions 4 size 40m; -<%= else -%> +<% else -%> file "/var/log/bind9/named-query.log" versions 4 size 40m; -<%= end -%> +<% end -%> print-time yes; print-category yes; }; @@ -61,3 +61,4 @@ logging { category lame-servers { null; }; }; +