1
+ # -*- coding: utf-8 -*-
2
+ # vim: ft=yaml
3
+ ---
1
4
# Note - Each section beginning with 'bind:' below represents a different way you may configure
2
- pillars for bind. When configuring your pillar(s), you may use any combination of subsections,
3
- but salt will not merge sections with the same heading.
5
+ # pillars for bind. When configuring your pillar(s), you may use any combination of subsections,
6
+ # but salt will not merge sections with the same heading.
4
7
5
8
6
9
# ## Overrides for the defaults specified by ###
@@ -32,36 +35,36 @@ bind:
32
35
use_extensive_logging : # Enable extensive config for logging. Partial example. For proposed settings please refer to
33
36
channel : # https://kb.isc.org/article/AA-01526/0/BIND-Logging-some-basic-recommendations.html
34
37
default_log :
35
- file: default
38
+ file : default
36
39
size : ' 200m' # size of a individual file (default 20m)
37
40
versions : ' 10' # how many files will be stored (default 3)
38
- print-time: yes
39
- print-category: yes
40
- print-severity: yes
41
+ print-time : true
42
+ print-category : true
43
+ print-severity : true
41
44
severity : info
42
45
queries_log :
43
46
file : queries
44
- print-time: yes
45
- print-category: yes
46
- print-severity: yes
47
+ print-time : true
48
+ print-category : true
49
+ print-severity : true
47
50
severity : info
48
51
query-errors_log :
49
52
file : query-errors
50
- print-time: yes
51
- print-category: yes
52
- print-severity: yes
53
+ print-time : true
54
+ print-category : true
55
+ print-severity : true
53
56
severity : dynamic
54
57
default_syslog :
55
- print-time: yes
56
- print-category: yes
57
- print-severity: yes
58
+ print-time : true
59
+ print-category : true
60
+ print-severity : true
58
61
syslog : daemon
59
62
severity : info
60
63
default_debug :
61
64
file : named.run
62
- print-time: yes
63
- print-category: yes
64
- print-severity: yes
65
+ print-time : true
66
+ print-category : true
67
+ print-severity : true
65
68
severity : info
66
69
category :
67
70
default :
@@ -99,21 +102,21 @@ bind:
99
102
# (ipv4: 4, ipv6: 6). Omitting this reverts to
100
103
# binds default of both.
101
104
102
- # Debian and FreeBSD based systems
103
- default_zones: True # If set to True , the default-zones configuration
104
- # will be enabled. Defaults to False .
105
+ # Debian and FreeBSD based systems
106
+ default_zones : true # If set to true , the default-zones configuration
107
+ # will be enabled. Defaults to false .
105
108
106
109
includes : # Include any additional configuration file(s) in
107
110
- /some/additional/named.conf # named.conf
108
111
109
- # Debian based systems optional configs
112
+ # Debian based systems optional configs
110
113
bind :
111
114
config :
112
115
options :
113
116
querylog : ' yes' # Enable query logs, by default is disabled in map.jinja (yes,no)
114
117
115
118
rndc_client : # Generate rndc.conf file it uses previously defined keys
116
- options:
119
+ options :
117
120
default :
118
121
server : localhost
119
122
port : 953
@@ -127,7 +130,7 @@ bind:
127
130
key : my_default_key
128
131
129
132
controls : # If you define controls then you also should configure rndc_client
130
- local:
133
+ local :
131
134
enabled : true
132
135
bind :
133
136
address : 127.0.0.1
@@ -147,7 +150,7 @@ bind:
147
150
keys :
148
151
- core_dhcp
149
152
150
- statistics: # Enable statistics-channel
153
+ statistics : # Enable statistics-channel
151
154
local :
152
155
enabled : true
153
156
bind :
@@ -166,38 +169,38 @@ bind:
166
169
167
170
configured_zones : # Debian based systems can have zones using only configured_zones
168
171
sub.domain.com : # This zone will be copied from zones_source_dir
169
- file: sub.domain.com # You can optionally specify name of a file here.
170
- type: master # Yo don't have define zone again in available_zones.
172
+ file : sub.domain.com # You can optionally specify name of a file here.
173
+ type : master # Yo don't have define zone again in available_zones.
171
174
# This feature is backward compatibile and only available in debian
172
- notify: False # if type master you need specify notify True/False
175
+ notify : false # if type master you need specify notify true/false
173
176
174
- sub2.domain.com:
177
+ sub2.domain.com :
175
178
file : sub2.domain.com
176
179
type : master
177
- notify: True
178
- allow-query:
180
+ notify : true
181
+ allow-query :
179
182
- any
180
- allow-transfer:
183
+ allow-transfer :
181
184
- my_net
182
185
allow-update : ' none'
183
186
also-notify :
184
187
- 1.2.3.4
185
188
- 1.2.3.3
186
- zone-statistics: yes # Enable detailed statistics for zone. You need enable statistics first
189
+ zone-statistics : true # Enable detailed statistics for zone. You need enable statistics first
187
190
188
191
test.zone.com :
189
192
file : test.zone.com
190
193
type : slave
191
- notify: False
194
+ notify : false
192
195
masters :
193
- - my_dns_masters # You can specify masters by using name
196
+ - my_dns_masters # You can specify masters by using name
194
197
195
198
test.zone2.com : # Zone definied in default style of this formula
196
- type: slave # You need specify all info inside available_zones
197
- notify: False
199
+ type : slave # You need specify all info inside available_zones
200
+ notify : false
198
201
199
202
200
- configured_masters: # Configure master dns
203
+ configured_masters : # Configure master dns
201
204
my_dns_masters :
202
205
- 10.10.20.20
203
206
- 10.10.30.30
@@ -210,13 +213,12 @@ bind:
210
213
- 10.167.73.21
211
214
- 10.174.60.44
212
215
213
- # End Debian based systems features
216
+ # End Debian based systems features
214
217
215
218
# on SUSE include the forwarders.conf file generated by netconfig(8)
216
219
bind :
217
220
config :
218
- include_forwarders: True
219
-
221
+ include_forwarders : true
220
222
221
223
222
224
# ## Keys, Zones, ACLs and Views ###
@@ -228,7 +230,7 @@ bind:
228
230
configured_zones :
229
231
sub.domain.com : # First domain zone
230
232
type : master # We're the master of this zone
231
- notify: False # Don't notify any NS RRs of any changes to zone
233
+ notify : false # Don't notify any NS RRs of any changes to zone
232
234
also-notify : # Do notify these IP addresses (pointless as
233
235
- 1.1.1.1 # notify has been set to no)
234
236
- 2.2.2.2 # If using views, do not define configured_zones
@@ -237,28 +239,28 @@ bind:
237
239
238
240
sub.domain2.com : # Domain zone with DNSSEC
239
241
type : master # We're the master of this zone
240
- notify: False # Don't notify any NS RRs of any changes to zone
241
- dnssec: True # Create and manage signed zonefile with zonesigner
242
+ notify : false # Don't notify any NS RRs of any changes to zone
243
+ dnssec : true # Create and manage signed zonefile with zonesigner
242
244
# You will have to install dnssec-tools by hand
243
245
# on many distributions
244
246
245
247
sub.domain3.com : # Domain zone with DNSSEC
246
248
type : master # We're the master of this zone
247
- notify: False # Don't notify any NS RRs of any changes to zone
249
+ notify : false # Don't notify any NS RRs of any changes to zone
248
250
auto-dnssec : ' maintain' # Bind will create and manage the signed zonefile
249
251
# itself, we only have to provide the clear zone
250
252
251
253
1.168.192.in-addr.arpa : # Reverse lookup for local IPs
252
254
type : master # As above
253
- notify: False # As above
255
+ notify : false # As above
254
256
allow-transfer : # As above
255
257
- 1.1.1.1
256
258
- 2.2.2.2
257
259
258
260
dynamic.domain.com : # Our ddns zone
259
261
type : master # As above
260
262
allow-update : " key core_dhcp" # Who we allow updates from (refers to above key)
261
- notify: True # Notify NS RRs of changes
263
+ notify : true # Notify NS RRs of changes
262
264
263
265
sub.anotherdomain.com : # Another domain zone
264
266
type : forward # This time it's a forwarding zone
@@ -290,7 +292,7 @@ bind:
290
292
# serve a different record set in each.
291
293
# If doing this, you need to configure the zones and their record sets
292
294
# underneath the 'available_zones' section.
293
- notify: False
295
+ notify : false
294
296
update_policy : # A given update policy
295
297
- " grant core_dhcp name dns_entry_allowed_to_update. ANY"
296
298
@@ -341,8 +343,6 @@ bind:
341
343
_dmarc :
' "v=DMARC1; p=quarantine; rua=mailto:[email protected] ; fo=1:d:s; adkim=r; aspf=r; pct=100; ri=86400"'
342
344
343
345
344
-
345
-
346
346
3.2.1.in-addr.arpa : # auto-generated reverse zone
347
347
file : example.com.rev.txt
348
348
soa : # Declare the SOA RRs for the zone
0 commit comments