- name: Configure nvak as dns server
  hosts: nvak.banananet.work
  vars:
    nvak_dns_slaves: []
  roles:
    - role: dns/master
      vars:
        domain: banananet.work
        responsible_mail_name: admin.banananet.work
        slaves: "{{ nvak_dns_slaves }}"
        entries:
          # limit CA
          - type: CAA
            data: 0 issue "letsencrypt.org"
          # other entries
          - domain: mc.wg
            type: A
            data: 85.131.171.106
          - domain: _minecraft._tcp.wg
            type: SRV
            data: "10 10 25565 mc.wg.{{ domain }}."
          - domain: _minecraft._tcp.mc.wg
            type: SRV
            data: "10 10 25565 mc.wg.{{ domain }}."
    - role: dns/master
      vars:
        domain: forumderschan.de
        responsible_mail_name: admin.banananet.work
        slaves: "{{ nvak_dns_slaves }}"
        entries:
          # Glue record
          - type: NS
            data: ns1.banananet.work.
          # limit CA
          - type: CAA
            data: 0 issue "letsencrypt.org"
    - role: dns/master
      vars:
        domain: stadtpiraten-karlsruhe.de
        responsible_mail_name: admin.banananet.work
        slaves: "{{ nvak_dns_slaves }}"
        entries:
          # Glue record
          - type: NS
            data: ns1.banananet.work.
          # limit CA
          - type: CAA
            data: 0 issue "letsencrypt.org"

- name: Add public available hosts to dns zones
  hosts: public_available
  roles:
    - role: dns/server_entries
      domain: "{{ inventory_hostname }}"