44 Commits (ee8f1f0815da60ec7cdc6a1188da31baadcbc995)

Author SHA1 Message Date
Felix Stupp b0cc2b8ca1
dns/master: Make backups of dynamic zone data 5 years ago
Felix Stupp ae42f963a2
dns: Transfered master zones from makefile approach to dynamic updates approach 5 years ago
Felix Stupp 0232319ccd
dns/master: Configured dnssec-policy for automatic KASP 5 years ago
Felix Stupp 360172f8db
dns/master: Moved default tts var to global var 5 years ago
Felix Stupp 72ee42d539
dns/master: Allow configure default ttl 5 years ago
Felix Stupp 3008672ded
dns/master: Added section comments to zone.conf 5 years ago
Felix Stupp a41f4c1c3f
dns/master: Adapted generate-keys to inline-signing (only gen KSK) 5 years ago
Felix Stupp fbca70f81f
dns/master: Create keys directory writeable for bind
To apply KASP later
5 years ago
Felix Stupp d73e250b36
dns/master: Changed owner and adapted permissions of zone directory 5 years ago
Felix Stupp 77d1e84117
dns: Fixed variable structure of var domain_environment_directory 5 years ago
Felix Stupp 55b27c041b
dns: Extracted role entries from server_entries 5 years ago
Felix Stupp 9d23e12a16
dns/master: Now considered vars for nameserver and mail to be absolute
Meaning the var itself must not have a dot at the end of the name,
but an usage of the variable may need to append a dot.
5 years ago
Felix Stupp 1958c4df54
dns: Renamed role entries to server_entries
To distinguish between simple entries role (coming in the future) and
entries role bundled with server-related entries (A, AAAA, SSHFP)
5 years ago
Felix Stupp 2158b2717d
dns/master: Added support for dname to root zone 5 years ago
Felix Stupp 979abba1aa
Added role dns/entries for configuring dns entries 5 years ago
Felix Stupp 748999d36d
dns: Moved var zones_environment_directory to global vars 5 years ago
Felix Stupp f8c01d46f6
dns/master: Fix permissions for dns env dir 5 years ago
Felix Stupp eb632a8f2c
dns/master: Store mapping of domain to host in public_keys 5 years ago
Felix Stupp 025f77736a
dns: Changed approach for DNSSEC signing to inline-signing
- Moved keys into own directory
- Replaced makefile per zone by makefile for all zones
  - Only combining of zone files and setting serial number
  - signing now made by bind
- Added AppArmor profile extension for creating dynamic zone files
5 years ago
Felix Stupp e85ad8fed3
dns: Fixed applying permissions to directories 5 years ago
Felix Stupp c89ec27f6d
dns/master: Changed TODO for "Copy public key" to "Copy ZSK"
Only required and beneficial for ZSK
5 years ago
Felix Stupp 905a887b80
dns: Renamed zones_configuration_environment_ to zones_environment 5 years ago
Felix Stupp 7e2813928e
dns: Renamed variables, removed prefix dns_ on not essential variable names 5 years ago
Felix Stupp ab1a067cff
dns/master: Added flush_handlers before role ends 5 years ago
Felix Stupp 64576c8ff5
dns/master: zone.makefile: Added cd to key signing 5 years ago
Felix Stupp ab61090340
dns/master: zone.makefile: Added check for directories not equal 5 years ago
Felix Stupp bb8a2759ec
dns/master: zone.makefile: Changed usage of var dest 5 years ago
Felix Stupp d052a08f0d
dns/master: zone.makefile: Fixed format 5 years ago
Felix Stupp ebbacdce0c
dns/master: Added dependency to role dns/master_handlers 5 years ago
Felix Stupp 73c9a72590
dns: Fixed usages of var dns_zones_configuration_environment_directory 5 years ago
Felix Stupp 0662df1ca5
dns/master: Let serial number configured by dnssec-signzone 5 years ago
Felix Stupp d8f1b36ee1
dns/master: Moved building of zone files to makefile 5 years ago
Felix Stupp d7991e0bbb
dns/master: Added configuring configuration environment 5 years ago
Felix Stupp 5627a36949
dns/master: Extracted database_signed_file_name of database_signed_file 5 years ago
Felix Stupp a206642f77
dns/master: Extracted database_file_name of database_file 5 years ago
Felix Stupp 36bf7f9d18
dns/master: Declared var domain to be required 5 years ago
Felix Stupp 8e95846002
dns/master: Added create zone environment directory 5 years ago
Felix Stupp de2bfe430c
dns/master: Rewrite create zone directories using loop 5 years ago
Felix Stupp 7ac7806dc7
Fixed some lint errors
- Added missing default parameters
- Added names to tasks
- Configured changed|failed_when options
- Used command instead of shell module
- Changed local_action to delegate_to
- Added line to file ending
5 years ago
Felix Stupp 243b804fa4
dns/master: Added CAA Entry for letsencrypt.org 5 years ago
Felix Stupp df88e582a7
dns/master: Added dnssec support
- Generation of keys
- Signing zone after each change
5 years ago
Felix Stupp 69026d8d27
dns/master: Moved zone files into directory per zone 5 years ago
Felix Stupp befbff3c7e
dns/master: Added prefix for paths to vars in default 5 years ago
Felix Stupp 2b63f1a248
Added roles/dns/{application,master,slave} 6 years ago