d644868602
- Add mcintire.me zone + all 14 DNS records to tofu/cloudflare.tf (A, MX, CNAME, SRV, TXT) - Include zone settings, HSTS, bot management, firewall for mcintire.me - Update Porkbun NS from as393837_ns to cloudflare_ns in tofu/dns.tf - Remove mcintire.me zone from BIND9 master config (group_vars/bind9_servers/) - Delete mcintire.me.yml zone file - Remove mcintire.me secondary zone from git.mcintire.me host_vars
36 lines
988 B
YAML
36 lines
988 B
YAML
---
|
|
# BIND9 Configuration for ns1.as393837.net
|
|
# This server will be the primary authoritative nameserver
|
|
|
|
bind_allow_query: ["any"]
|
|
bind_listen_ipv4: ["any"]
|
|
bind_recursion: false
|
|
bind_zone_dir: /var/cache/bind
|
|
bind_zone_master_server_ip: "{{ public_ip }}"
|
|
|
|
# DNSSEC settings (dnssec-enable removed in BIND 9.16+)
|
|
bind_dnssec_validation: auto
|
|
|
|
# Secondaries that should receive NOTIFY
|
|
bind_also_notify:
|
|
- 204.87.183.53 # ns2
|
|
- 172.245.56.83 # git.mcintire.me
|
|
|
|
bind_allow_transfer:
|
|
- 23.128.97.53 # ns-global.kjsl.com
|
|
- 204.87.183.53 # ns2
|
|
- 172.245.56.83 # git.mcintire.me
|
|
|
|
# Zone definitions are loaded from individual files in zones/ directory
|
|
bind_zones:
|
|
- "{{ beanjar_org_zone }}"
|
|
- "{{ gridmap_org_zone }}"
|
|
- "{{ manero_org_zone }}"
|
|
- "{{ ntxarms_com_zone }}"
|
|
- "{{ towerops_net_zone }}"
|
|
- "{{ vntx_net_zone }}"
|
|
- "{{ vntx_org_zone }}"
|
|
- "{{ reverse_188_zone }}"
|
|
- "{{ reverse_189_zone }}"
|
|
- "{{ reverse_190_zone }}"
|
|
- "{{ reverse_191_zone }}"
|