From ab86dc9ba874a5dcde68ad367e6d451447e7ab8e Mon Sep 17 00:00:00 2001 From: Ricardo Sanz Date: Thu, 30 Nov 2017 14:47:03 +0100 Subject: [PATCH] Simple allow-recursion parameter configuration --- defaults/main.yml | 1 + templates/named.conf.options.j2 | 13 +++++++++++-- 2 files changed, 12 insertions(+), 2 deletions(-) diff --git a/defaults/main.yml b/defaults/main.yml index 6a6e3df..63c47b4 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -3,6 +3,7 @@ bind_config_master_zones: [] bind_config_master_allow_transfer: [] bind_config_master_forwarders: [] bind_config_recursion: "no" +bind_config_allow_recursion: [127.0.0.1] bind_config_slave_zones: [] bind_config_forward_zones: [] bind_service_state: started diff --git a/templates/named.conf.options.j2 b/templates/named.conf.options.j2 index 7a1deb6..fcf852e 100644 --- a/templates/named.conf.options.j2 +++ b/templates/named.conf.options.j2 @@ -56,9 +56,18 @@ options { {% endfor %} }; {% else %} - allow-query { any; }; // This is the default + allow-query { any; }; // This is the default + {% endif %} + + recursion {{ bind_config_recursion }}; // Do not provide recursive service + + {% if bind_config_recursion %} + allow-recursion { + {% for bind_config_allow_recursion_item in bind_config_allow_recursion %} + {{ bind_config_allow_recursion_item }}; + {% endfor %} + }; {% endif %} - recursion {{ bind_config_recursion }}; // Do not provide recursive service zone-statistics yes; };