---
- name: Configure named ns2
  hosts: ns2
  roles:
    - routing-policy-dns-via-balancer
    - named
  vars:
    policy_routing_local_routes:
      - "10.203.2.0/24 dev ens192 scope link src {{ ansible_host }} metric 100"

    policy_routing_balancers:
      - ip: "{{ hostvars['vm01-balancer'].ansible_host }}"
        mac: "{{ hostvars['vm01-balancer'].nic_ens192_mac }}"
        table_id: 53
        table_name: dns-via-vm01
        fwmark: 53
      - ip: "{{ hostvars['vm02-balancer'].ansible_host }}"
        mac: "{{ hostvars['vm02-balancer'].nic_ens192_mac }}"
        table_id: 54
        table_name: dns-via-vm02
        fwmark: 54
# Secondary Configuration
    named_listen_ipv4:
      - "any"
    named_listen_ipv4_port:
      - 53
    named_listen_ipv6:
      - "::"
    named_listen_ipv6_port:
      - 53
    named_recursion: true
    named_allow_recursion:
      - "Local"
    named_allow_query:
      - "any"
    named_allow_transfer:
      - "Transfer"
    named_extra_include_files:
      - "{{ named_auth_file }}"
    named_statistics_channels:
      - named_statistics_host: '127.0.0.1'
      - named_statistics_port: '8053'
      - named_statistics_allow:
          - '127.0.0.1'

    named_acls:
      - name: Transfer
        match_list:
          - 91.218.87.251
          - 10.203.0.84
          - 10.203.0.85
      - name: Local
        match_list:
          - 127.0.0.1
          - 127.0.0.0/8
          - 10.0.0.0/8
          - 172.16.0.0/12
          - 192.168.0.0/16
          - 100.64.0.0/10
          - 91.218.84.0/22
          - 91.236.140.0/22
          - 91.197.57.0/24
          - 213.109.201.0/24
          - 46.255.25.0/24
          - 2a13:af80::/29

    named_zones:
      # Primary server for domain gigacoms.info (specify zone type explicitly)
      - name: 'gigacoms.info'
        type: secondary
        primaries:
          - 10.203.2.11

      - name: 'gigacoms.ru'
        type: secondary
        primaries:
          - 10.203.2.11

      - name: 'serverok.ru'
        type: secondary
        primaries:
          - 10.203.2.11

      - name: 'vermax.com'
        type: secondary
        primaries:
          - 10.203.2.11

      - name: '84.218.91.in-addr.arpa'
        type: secondary
        primaries:
          - 10.203.2.11

      - name: '85.218.91.in-addr.arpa'
        type: secondary
        primaries:
          - 10.203.2.11

      - name: '86.218.91.in-addr.arpa'
        type: secondary
        primaries:
          - 10.203.2.11

      - name: '87.218.91.in-addr.arpa'
        type: secondary
        primaries:
          - 10.203.2.11

      - name: '140.236.91.in-addr.arpa'
        type: secondary
        primaries:
          - 10.203.2.11

      - name: '141.236.91.in-addr.arpa'
        type: secondary
        primaries:
          - 10.203.2.11

      - name: '201.109.213.in-addr.arpa'
        type: secondary
        primaries:
          - 10.203.2.11

      - name: '0.203.10.in-addr.arpa'
        type: secondary
        primaries:
          - 10.203.2.11