- name: Configure nvak as dns server
  hosts: nvak.banananet.work
  vars:
    nvak_dns_slaves: []
  roles:
    - role: dns/master
      domain: banananet.work
      responsible_mail_name: admin.banananet.work
      slaves: "{{ nvak_dns_slaves }}"
      entries:
        # limit CA
        - type: CAA
          data: 0 issue "letsencrypt.org"
        # other entries
        - domain: mc.wg
          type: A
          data: 5.83.168.74
        - domain: _minecraft._tcp.wg
          type: SRV
          data: "10 10 10110 mc.wg.{{ domain }}."
        - domain: _minecraft._tcp.mc.wg
          type: SRV
          data: "10 10 10110 mc.wg.{{ domain }}."
    - role: dns/master
      domain: forumderschan.de
      responsible_mail_name: admin.banananet.work
      slaves: "{{ nvak_dns_slaves }}"
      entries:
        # Glue record
        - type: NS
          data: ns1.banananet.work.
        # limit CA
        - type: CAA
          data: 0 issue "letsencrypt.org"
    - role: dns/master
      domain: stadtpiraten-karlsruhe.de
      responsible_mail_name: admin.banananet.work
      slaves: "{{ nvak_dns_slaves }}"
      entries:
        # Glue record
        - type: NS
          data: ns1.banananet.work.
        # limit CA
        - type: CAA
          data: 0 issue "letsencrypt.org"

- name: Add public available hosts to dns zones
  hosts: public_available
  roles:
    - role: dns/server_entries
      domain: "{{ inventory_hostname }}"