We no longer have secondaries for the debian zones
[mirror/dsa-puppet.git] / modules / named / manifests / primary.pp
1 class named::primary inherits named::authoritative {
2         include dnsextras::entries
3
4         @ferm::rule { '01-dsa-bind-4':
5                 domain      => '(ip ip6)',
6                 description => 'Allow nameserver access',
7                 rule        => '&TCP_UDP_SERVICE_RANGE(53, ( $HOST_DNS_GEO $HOST_NAGIOS $HOST_RCODE0 $HOST_EASYDNS $HOST_NETNOD ) )',
8         }
9
10         concat::fragment { 'dsa-named-conf-puppet-misc---local-shared-keys':
11                 target => '/etc/bind/named.conf.puppet-misc',
12                 order  => '020',
13                 content  => @(EOF),
14                         include "/etc/bind/named.conf.shared-keys";
15                         | EOF
16         }
17         concat::fragment { 'dsa-named-conf-puppet-misc---named.conf.external-secondaries-ACLs':
18                 target => '/etc/bind/named.conf.puppet-misc',
19                 order  => '025',
20                 content => template('named/named.conf.external-secondaries-ACLs.erb'),
21         }
22
23 }