You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
71 lines
2.1 KiB
YAML
71 lines
2.1 KiB
YAML
- name: Configure nvak as dns server
|
|
hosts: nvak.banananet.work
|
|
vars:
|
|
# Source: https://docs.hetzner.com/dns-console/dns/general/authoritative-name-servers
|
|
hetzner_authoritatives:
|
|
- ns1.first-ns.de.
|
|
- robotns2.second-ns.de.
|
|
- robotns3.second-ns.com.
|
|
hetzner_authoritatives_ip:
|
|
# ns1.first-ns.de.
|
|
- "213.239.242.238"
|
|
- "2a01:4f8:0:a101::a:1"
|
|
# robotns2.second-ns.de.
|
|
- "213.133.105.6"
|
|
- "2a01:4f8:d0a:2004::2"
|
|
# robotns3.second-ns.com.
|
|
- "193.47.99.3"
|
|
- "2001:67c:192c::add:a3"
|
|
roles:
|
|
- role: dns/master
|
|
domain: banananet.work
|
|
responsible_mail_name: hostmaster.banananet.work
|
|
slaves_ip: "{{ hetzner_authoritatives_ip }}"
|
|
entries:
|
|
# Hetzner NS entries
|
|
- type: NS
|
|
data: "{{ hetzner_authoritatives }}"
|
|
# limit CA
|
|
- type: CAA
|
|
data: 0 issue "letsencrypt.org"
|
|
# other entries
|
|
- domain: mc.wg
|
|
type: A
|
|
data: 5.83.168.74
|
|
- domain: _minecraft._tcp.wg
|
|
type: SRV
|
|
data: "10 10 10110 mc.wg.{{ domain }}."
|
|
- domain: _minecraft._tcp.mc.wg
|
|
type: SRV
|
|
data: "10 10 10110 mc.wg.{{ domain }}."
|
|
- role: dns/master
|
|
domain: forumderschan.de
|
|
responsible_mail_name: hostmaster.banananet.work
|
|
slaves_ip: "{{ hetzner_authoritatives_ip }}"
|
|
entries:
|
|
# Glue record
|
|
- type: NS
|
|
data: ns1.banananet.work.
|
|
# Hetzner NS entries
|
|
- type: NS
|
|
data: "{{ hetzner_authoritatives }}"
|
|
# limit CA
|
|
- type: CAA
|
|
data: 0 issue "letsencrypt.org"
|
|
- role: dns/master
|
|
domain: stadtpiraten-karlsruhe.de
|
|
responsible_mail_name: hostmaster.banananet.work
|
|
entries:
|
|
# Glue record
|
|
- type: NS
|
|
data: ns1.banananet.work.
|
|
# limit CA
|
|
- type: CAA
|
|
data: 0 issue "letsencrypt.org"
|
|
|
|
- name: Add public available hosts to dns zones
|
|
hosts: public_available
|
|
roles:
|
|
- role: dns/server_entries
|
|
domain: "{{ inventory_hostname }}"
|