pillar/role/dns/nsd.sls


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

nsd:
  config_data:
    server:
      hide-version: 'yes'
      verbosity: 2
      database: ""
  remote-control:
      control-enable: 'yes'
      control-interface: '/run/nsd/nsd.sock'
  zones:
    lysergic.dev:
      zone_source: salt://zones/lysergic.dev.zone
      allow-notify: 192.168.0.115 tsig.lysergic.dev.
      request-xfr: 10.0.10.2@5353 tsig.lysergic.dev.
      outgoing-interface: 192.168.0.160
    psyched.dev:
      zone_source: salt://zones/psyched.dev.zone
      allow-notify: 192.168.0.115 tsig.psyched.dev.
      request-xfr: 10.0.10.2@5353 tsig.psyched.dev.
      outgoing-interface: 192.168.0.160
    syscid.com:
      zone_source: salt://zones/syscid.com.zone
      allow-notify: 192.168.0.115 tsig.syscid.com.
      request-xfr: 10.0.10.2@5353 tsig.syscid.com.
      outgoing-interface: 192.168.0.160
  keys:
    tsig.lysergic.dev.:
      algorithm: hmac-sha512
      secret: ${'secret_nsd:tsig_key:lysergic_dev'}
    tsig.syscid.com.:
      algorithm: hmac-sha512
      secret: ${'secret_nsd:tsig_key:syscid_com'}
    tsig.psyched.dev.:
      algorithm: hmac-sha512
      secret: ${'secret_nsd:tsig_key:psyched_dev'}