diff options
| -rw-r--r-- | dnsserver.yml | 5 | ||||
| -rw-r--r-- | hosts | 5 | ||||
| -rw-r--r-- | roles/dnsserver/files/casperlefantom.net.zone | 9 | ||||
| -rw-r--r-- | roles/dnsserver/tasks/config.yml | 5 | ||||
| -rw-r--r-- | roles/dnsserver/tasks/dirs.yml | 8 | ||||
| -rw-r--r-- | roles/dnsserver/templates/named.conf.j2 | 9 |
6 files changed, 36 insertions, 5 deletions
diff --git a/dnsserver.yml b/dnsserver.yml new file mode 100644 index 0000000..d3cd181 --- /dev/null +++ b/dnsserver.yml @@ -0,0 +1,5 @@ +- hosts: dns + remote_user: root + roles: + - common + - dnsserver @@ -32,3 +32,8 @@ lancaster.casperlefantom.net vm01.casperlefantom.net vm02.casperlefantom.net vm03.casperlefantom.net + +[dns] +lancaster.casperlefantom.net +ns2.casperlefantom.net +vm02.casperlefantom.net diff --git a/roles/dnsserver/files/casperlefantom.net.zone b/roles/dnsserver/files/casperlefantom.net.zone index d76a22c..286936f 100644 --- a/roles/dnsserver/files/casperlefantom.net.zone +++ b/roles/dnsserver/files/casperlefantom.net.zone @@ -1,6 +1,6 @@ $ttl 86400 casperlefantom.net. IN SOA ns1.casperlefantom.net. hostmaster.casperlefantom.net. ( -2014060900 +2014101200 10800 3600 604800 @@ -11,8 +11,8 @@ casperlefantom.net. IN SOA ns1.casperlefantom.net. hostmaster.casperlefantom.net @ IN MX 10 mail.casperlefantom.net. -@ IN A 82.247.103.117 -@ IN AAAA 2a01:e35:2f76:7750::4 +@ IN A 178.170.111.194 +@ IN AAAA 2a00:c70:1:178:170:111:194:5000 www IN A 82.247.103.117 www IN AAAA 2a01:e35:2f76:7750::4 @@ -68,3 +68,6 @@ ntp2 IN AAAA 2a00:c70:1:178:170:111:194:5000 bank IN A 82.247.103.117 bank IN AAAA 2a01:e35:2f76:7750::4 + +blog IN A 82.247.103.117 +blog IN AAAA 2a01:e35:2f76:7750::4 diff --git a/roles/dnsserver/tasks/config.yml b/roles/dnsserver/tasks/config.yml index 47bb295..6d078f7 100644 --- a/roles/dnsserver/tasks/config.yml +++ b/roles/dnsserver/tasks/config.yml @@ -10,6 +10,7 @@ owner=root group=named mode=640 + when: ansible_default_ipv6.address == master_ipv6 notify: reload named with_items: - casperlefantom.net.zone @@ -19,3 +20,7 @@ - 117.103.247.82.in-addr.arpa - 0.0.0.5.4.9.1.0.1.1.1.0.0.7.1.0.8.7.1.0.1.0.0.0.0.7.c.0.0.0.a.2.ip6.arpa - 194.111.170.178.in-addr.arpa + +- name: Open listening port 53 + firewalld: service=dns permanent=true state=enabled + when: ansible_distribution == "Fedora" diff --git a/roles/dnsserver/tasks/dirs.yml b/roles/dnsserver/tasks/dirs.yml index 5768ad3..93a0a1a 100644 --- a/roles/dnsserver/tasks/dirs.yml +++ b/roles/dnsserver/tasks/dirs.yml @@ -13,7 +13,7 @@ when: ansible_distribution == "CentOS" - name: Création initiale des fichiers journaux dans /var/log/ - file: path=/var/log/named/{{ item }} state=present + file: path=/var/log/named/{{ item }} state=file owner=named group=named mode=644 @@ -29,7 +29,7 @@ when: ansible_distribution == "Fedora" - name: Création initiale des fichiers journaux dans /var/named/chroot/ - file: path=/var/named/chroot/var/log/named/{{ item }} state=present + file: path=/var/named/chroot/var/log/named/{{ item }} state=file owner=named group=named mode=644 @@ -46,3 +46,7 @@ - name: Modification des permissions de /var/named/ file: path=/var/named/ state=directory mode=770 + +- name: Configuration booleen SELinux de /var/named/ + seboolean: name=named_write_master_zones state=yes persistent=yes + when: ansible_selinux != false diff --git a/roles/dnsserver/templates/named.conf.j2 b/roles/dnsserver/templates/named.conf.j2 index 9d5356e..36acbad 100644 --- a/roles/dnsserver/templates/named.conf.j2 +++ b/roles/dnsserver/templates/named.conf.j2 @@ -240,5 +240,14 @@ zone "0.0.0.5.4.9.1.0.1.1.1.0.0.7.1.0.8.7.1.0.1.0.0.0.0.7.c.0.0.0.a.2.ip6.arpa" {% endif %} }; +{% if ansible_default_ipv6.address != master_ipv6 and ansible_default_ipv6.address != slave1_ipv6 %} +{% for domain in google.com google.fr googlevideos.com admob.com adsense.com adwords.com android.com blogger.com blogspot.com chromium.org chrome.com chromebook.com feedburner.com doubleclick.com igoogle.com foofle.com froogle.com googleanalytics.com google-analytics.com googlecode.com googlesource.com googledrive.com googlearth.com googleearth.com googlemaps.com googlepagecreator.com googlescholar.com keyhole.com panoramio.com picasa.com sketchup.com urchin.com waze.com youtube.com youtu.be yt.be ytimg.com youtubeeducation.com youtube-nocookie.com like.com google.org google.net 1e100.net 466453.com gooogle.com gogle.com ggoogle.com gogole.com goolge.com googel.com googil.com googlr.com ggpht.com gmodules.com gtempaccount.com gstatic.com googleadservices.com googleapps.com googleapis.com goo.gl googlebot.com googlecommerce.com googleratings.com googlesyndication.com googletagservices.com googleusercontent.com whatbrowser.org gmail.com googlemail.com facebook.com %} +zone "{{ domain }}" IN { + type master; + file ""; +}; +{% endfor %} +{% endif %} + include "/etc/named.rfc1912.zones"; include "/etc/named.root.key"; |