nsadmin.conf

# vi: set filetype=sh :: Vi/ViM
#-
# Copyright (c) 2012-2017 Parker Lee Ranney TTEE
# Copyright (c) 2017-2025 Devin Teske <dteske@FreeBSD.org>
# All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions
# are met:
# 1. Redistributions of source code must retain the above copyright
#    notice, this list of conditions and the following disclaimer.
# 2. Redistributions in binary form must reproduce the above copyright
#    notice, this list of conditions and the following disclaimer in the
#    documentation and/or other materials provided with the distribution.
#
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
# ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
# SUCH DAMAGE.
#
############################################################ IDENT(1)
#
# $Title: nsadmin configuration file $
# $Id: nsadmin.conf,v 1.3 2012/05/11 02:37:17 root Exp $
# $Copyright: 2017-2019 Devin Teske. All rights reserved. $
# $FrauBSD: nsadmin/nsadmin.conf 2025-09-25 13:40:04 -0700 freebsdfrau $
#
############################################################ INFORMATION
#
# nsadmin.conf -- Variables for use by nsadmin
#
############################################################ CONFIGURATION

#
# Mail Settings
# NB: admin/critical can contain multiple addresses, space-separated in quotes
#
admin= # ops@example.com		# Admin email address
critical= # page-ops@example.com	# Critical failure email address
domain= # example.com			# Sender domain. Default: $HOSTNAME

#
# Users and Groups
#
user=cm					# Push process user account

#
# Directories and Files
#
exclude="RCS build"			# Exclude from changes or edits
					# in $nsadmindir (literal matches)
zone_exclude_patterns="*.backup* *.bak*"
					# Zone name patterns to exclude
					# from BIND configuration generation

#
# Error Message Suppression (optional)
#
# Uncomment and customize to suppress specific error messages during operations
# Use pipe-separated patterns for grep -E matching
#
# suppress_errors="Operation not permitted|Permission denied"
suppress_errors=				# Error patterns to suppress (default: none)

#
# Configuration options to add to each zone in each generated include
#
exec 9<<EOF
EOF
include_zone_extra=$( cat <&9 )

#
# Zone File Settings
#
views="nsadmin"				# Views to create (space separated)
serial=$( date +%s )			# Zone file serial number
contact=root.example.com		# DNS admins
expire=1209600				# Zone expire
minimum=900				# Zone minimum
primary=ns1.example.com			# Primary nameserver
secondary=ns2.example.com		# Secondary nameserver
refresh=900				# Zone refresh
retry=600				# Zone retry
ttl=360					# Zone TTL

#
# Secondary Transfer
# NB: Disabled if $transfer is unset or NULL
#
transfer= # "$secondary"
					# DNS secondary resolvers
scpopts="-i /home/$user/.ssh/id_rsa -q -F /home/$user/.ssh/config"
					# SCP arguments
sshopts="-l $user -i /home/$user/.ssh/id_rsa -q"
sshopts="$sshopts -F /home/$user/.ssh/config"
					# SSH arguments

############################################################ MAIN

#
# OS Glue
#
case "$( uname )" in
FreeBSD)
	binduser=bind
	bindgroup=bind
	nsadmindir=/usr/local/etc/nsadmin
	nameddir=/usr/local/etc/namedb
	;;
Linux)
	binduser=named
	bindgroup=named
	nsadmindir=/etc/nsadmin
	nameddir=/var/named
	;;
*)
	binduser=named
	bindgroup=named
	nsadmindir=/etc/nsadmin
	nameddir=/var/named
esac

#
# Directories and Files
#
lock="$nsadmindir/.nsadmin-lock"	# Lock file for DNS edits
log="$nsadmindir/.nsadmin-log"		# Log file
tmp="$nsadmindir/build/tmp"		# Temporary directory

################################################################################
# END
################################################################################