Graham McIntire
c64f59929e
Add an RPZ blocklist on the Unbound resolvers that returns NXDOMAIN for a set of domains (and subdomains) and logs only those matches under rpz-log tag "blocklist". Domains are templated from resolver_blocked_domains (single source of truth) into /etc/unbound/blocklist.rpz; respip module enabled for RPZ support. Fix deprecation warnings across the Ansible tree: - apt_repository -> deb822_repository (monitor, aprsc, uisp, grafana), removing stale .list files and adding update_cache where deb822 drops it - community.mysql.* -> ansible.mysql.* (monitor) and requirements.yml - top-level facts -> ansible_facts[...] (ansible_os_family, distribution_release, fqdn, architecture, default_ipv4) repo-wide
32 lines
602 B
YAML
32 lines
602 B
YAML
---
|
|
aprsc_server_id: NOCALL
|
|
aprsc_passcode: "0"
|
|
aprsc_admin: "Server Admin"
|
|
aprsc_email: admin@example.com
|
|
|
|
aprsc_path: /opt/aprsc
|
|
aprsc_user: aprsc
|
|
|
|
# Upstream connection
|
|
aprsc_uplink: hub-rotate.aprs2.net
|
|
aprsc_uplink_port: 20152
|
|
aprsc_uplink_type: full
|
|
aprsc_bind_address: ""
|
|
|
|
# Listeners
|
|
aprsc_fullfeed_port: 10152
|
|
aprsc_client_port: 14580
|
|
aprsc_udpsubmit_port: 8080
|
|
aprsc_http_status_port: 14501
|
|
aprsc_http_upload_port: 8080
|
|
|
|
# Timeouts
|
|
aprsc_upstream_timeout: 15s
|
|
aprsc_client_timeout: 48h
|
|
|
|
# Logging
|
|
aprsc_log_rotate_size: 10
|
|
aprsc_log_rotate_count: 5
|
|
|
|
# Resource limits
|
|
aprsc_file_limit: 10000
|