32342db0d0
bind: Update AppArmor rules
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|3111|0|3111|0|:zzz:
gitea/ansible-roles/pipeline/head This commit looks good
2024-08-22 16:24:02 +02:00
c524ffb472
bind: New variables to change IPs bind will listen on & send notify/transfer commands
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2745|0|2745|0|:zzz:
gitea/ansible-roles/pipeline/head This commit looks good
2024-06-06 11:07:03 +02:00
William Hirigoyen
41897f4c62
bind: improve reload script
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2670|2|2668|2|:-1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/442//ansiblelint">Evolix » ansible-roles » unstable #442</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-12-29 12:12:39 +01:00
David Prevot
95610e16be
bind: allow bullseye and bookworm
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2667|0|2667|0|:zzz:
gitea/ansible-roles/pipeline/head This commit looks good
2023-12-12 17:11:47 +01:00
David Prevot
066a66eb4b
[minor] drop extra line
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2653|5|2648|6|:+1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/415//ansiblelint">Evolix » ansible-roles » unstable #415</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-11-30 16:45:08 +01:00
David Prevot
33d22b2614
bind: Bind mount for Bookworm
2023-11-21 11:21:31 +01:00
David Prevot
3bd87906ce
bind: Adapt chroot-bind for Bookworm
2023-11-21 09:04:57 +01:00
David Prevot
9cedf84dae
bind: Group accessibility for /var/chroot-bind
2023-11-21 09:04:57 +01:00
David Prevot
7ad55027da
bind: Adapt apparmor rules as in https://wiki.debian.org/Bind9
2023-11-21 09:04:57 +01:00
David Prevot
c71521acc3
bind: Adapt chroot-bind for Buster
2023-11-21 09:04:57 +01:00
David Prevot
8993242b2c
bind: /etc/default/bind9 has been renamed as /etc/default/named
...
Since Bullseye (Debian 11)
2023-11-21 09:04:57 +01:00
William Hirigoyen
6cd4048a0c
bind: add todo to reload-zone script
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2647|5|2642|4|:-1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/354//ansiblelint">Evolix » ansible-roles » unstable #354</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-09-20 14:28:54 +02:00
William Hirigoyen
ef642e564e
bind: Add reload-zone helper
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2598|2|2596|4|:+1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/300//ansiblelint">Evolix » ansible-roles » unstable #300</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-07-21 16:19:26 +02:00
00fe225a3c
force: [yes,no] → force [true,false]
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2615|7|2608|177|:+1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/278//ansiblelint">Evolix » ansible-roles » unstable #278</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-06-28 13:25:30 +02:00
ee21973371
Use FQCN
...
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2777|524|2253|2462|:+1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/223//ansiblelint">Evolix » ansible-roles » unstable #223</a>
gitea/ansible-roles/pipeline/head This commit looks good
Fully Qualified Collection Name
2023-03-20 23:33:19 +01:00
d366683acc
bind: jinja syntax
gitea/ansible-roles/pipeline/head This commit looks good
2023-02-28 10:12:38 +01:00
b2c215eef0
formatting
2023-02-26 21:32:51 +01:00
8cbe837147
bind: refactor role
...
gitea/ansible-roles/pipeline/head This commit looks good
* queries log can be enabled or disabled
* split tasks
* check if AppArmor is present
* don't install Munin plugin whose data file is not present
* remove example ACL in authoritative configuration
2023-02-21 19:01:01 +01:00
William Hirigoyen
cd8a812288
bind: fix fail in check mode
gitea/ansible-roles/pipeline/head This commit looks good
2023-02-21 15:14:05 +01:00
21a4f76330
bind: use systemd module
2023-02-21 15:08:02 +01:00
7a0e0d81d6
Proper jinja spacing
gitea/ansible-roles/pipeline/head This commit looks good
2022-12-28 09:03:37 +01:00
8eae5bba63
Use systemd module instead of command
2022-12-28 09:02:17 +01:00
0fe0244116
Update Galaxy metadata (company, platforms and galaxy_tags)
2021-06-28 15:26:28 +02:00
7dc6f0b849
remove trailing whitespaces
2021-05-13 15:23:39 +02:00
2ed77c60f0
Improve Ansible syntax
...
replace « x | changed » by « x is changed »
add explicit « bool » filter
use « length » filter instead of string comparison
2021-05-09 23:06:42 +02:00
5138065059
Use 'loop' syntax instead of 'with_items'
2021-05-04 14:19:18 +02:00
e5511eafc6
Revert changes to bind log path from apparmor fix
...
continuous-integration/drone/push Build is passing
I realised it wasnt the best idea to change the path we are used to using just for this, so I overwrite the apparmor configuration instead.
2021-03-09 16:58:14 -05:00
7da22e243e
Changed log directory for bind9
...
It is now /var/log/named, this is what debian 10 and apparmor expect by default. This fixes the bind9 service crashing at start.
2021-03-09 12:25:15 -05:00
d5731f90e0
Merge branch 'bind9_evocheck_fix' into unstable
continuous-integration/drone/push Build is passing
2020-03-10 13:48:52 -04:00
131004136e
Fix mistake in bind logrotate template name
...
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
Just a minor typo, but stops it from running.
2020-01-14 15:15:58 +01:00
e04d881988
replace "with_items" in apt modules
2019-12-31 16:18:56 +01:00
Patrick Marchand
cf8cca745e
hardcode chrooted bind variables
...
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
The current chroot-bind.sh is legacy code that cannot be migrated
without a proper understanding of it's historical context. This
context might still apply and this script is still used on a variety
of new and old machines. By hardcoding the paths when the user
requests a chroot, we limit possible breakage.
2019-11-26 17:17:48 -05:00
Patrick Marchand
5008b79ef5
Remove remaining hardcoded log paths from bind role
...
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
We had variables for the log paths, but these were not being used
by all templates.
2019-11-26 14:04:20 -05:00
Patrick Marchand
7728f5f0c5
Made sure munin and logrotate use the proper path for bind logs
...
Not all code paths made sure that the chroot was taken into account.
2019-11-26 14:02:28 -05:00
Patrick Marchand
b7a223dbdd
use yes / no instead of True / False for certain flags in bind role
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2019-11-26 11:58:42 -05:00
Patrick Marchand
3ede484242
Standardization of booleans for bind role
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2019-11-26 11:53:05 -05:00
Patrick Marchand
839db42c81
Revert "yaml lint and quoting standardisation for bind role"
...
This reverts commit 6118dda7c9
2019-11-26 11:48:21 -05:00
Patrick Marchand
6118dda7c9
yaml lint and quoting standardisation for bind role
continuous-integration/drone/push Build encountered an error
continuous-integration/drone/pr Build encountered an error
2019-10-09 12:15:55 -04:00
Patrick Marchand
2bbebded9e
Migrated bind role to python booleans
2019-10-09 12:07:14 -04:00
Patrick Marchand
c6804e73e7
Adapted the bind role to respect the evocheck warnings
...
The required munin plugins and the logging necessary for them to work is
now activated depending on the type of resolver and the logrotate file is
changed from bind to bind9.
2019-10-09 11:54:30 -04:00
aa28e9c1b8
change repositories URL
2019-03-21 15:31:58 +01:00
77aeb60544
bind: chroot-bind.sh must not be executed in check mode
2018-08-21 18:46:16 +02:00
215d83f0b4
bind: keep 52 weeks of logs
2017-12-28 11:27:36 +01:00
Gregory Colpart
3b78613b2e
Big review of role Bind, sync with https://wiki.evolix.org/HowtoBind
2017-07-22 18:40:00 +02:00
8505bb9d3c
… so the backup is not needed anymore
2017-07-18 19:43:28 +02:00
20c575ee1e
named.conf.options is managed by ansible
2017-07-18 19:42:54 +02:00
0c2170cf5c
Remove some backups, again
2017-07-18 19:38:03 +02:00
639a4baf75
Bind: use the chroot variable for Munin
2017-07-17 14:45:36 +02:00
Gabriel Periard-Tremblay
87ebadcadd
Kitchen: Change base image to evolix/ansible
2017-06-02 08:38:08 -04:00
2413539529
bind: fix rights for named.conf.options
2017-04-20 13:54:35 +02:00
