83 lines
2 KiB
YAML
83 lines
2 KiB
YAML
---
|
|
|
|
# List of zones for which this name server is authoritative
|
|
named_zones: []
|
|
# List of acls.
|
|
named_acls: []
|
|
# Key binding for secondary servers
|
|
named_dns_keys: []
|
|
# - name: primary_key
|
|
# algorithm: hmac-sha256
|
|
# secret: "azertyAZERTY123456"
|
|
|
|
# List of IPv4 address of the network interface(s) to listen on. Set to "any"
|
|
# to listen on all interfaces
|
|
named_listen_ipv4:
|
|
- 127.0.0.1
|
|
|
|
# The list of ports to listen on for IPv4 addresses
|
|
named_listen_ipv4_port:
|
|
- 53
|
|
|
|
# List of IPv6 address of the network interface(s) to listen on.
|
|
named_listen_ipv6:
|
|
- ::1
|
|
|
|
# The list of ports to listen on for IPv6 addresses
|
|
named_listen_ipv6_port:
|
|
- 53
|
|
|
|
# List of hosts that are allowed to query this DNS server.
|
|
named_allow_query:
|
|
- localhost
|
|
|
|
# A key-value list mapping server-IPs to TSIG keys for signing requests
|
|
named_key_mapping: {}
|
|
# Determines whether recursion should be allowed. Typically, an authoritative
|
|
# name server should have recursion turned OFF.
|
|
named_recursion: false
|
|
named_recursive_clients: 5000
|
|
named_allow_recursion:
|
|
- any
|
|
|
|
# Allows BIND to be set up as a caching name server
|
|
named_forward_only: false
|
|
|
|
# List of name servers to forward DNS requests to.
|
|
named_forwarders: []
|
|
# DNS round robin order (random or cyclic)
|
|
named_rrset_order: random
|
|
|
|
# statistics channels configuration
|
|
named_statistics_channels: false
|
|
named_statistics_port: 8053
|
|
named_statistics_host: 127.0.0.1
|
|
named_statistics_allow:
|
|
- 127.0.0.1
|
|
|
|
# DNSSEC configuration
|
|
named_dnssec_enable: true
|
|
named_dnssec_validation: true
|
|
|
|
named_extra_include_files: []
|
|
# SOA information
|
|
named_zone_ttl: 1W
|
|
named_zone_time_to_refresh: 1D
|
|
named_zone_time_to_retry: 1H
|
|
named_zone_time_to_expire: 1W
|
|
named_zone_minimum_ttl: 1D
|
|
|
|
# File mode for primary zone files (needs to be something like 0660 for dynamic updates)
|
|
named_zone_file_mode: "0640"
|
|
|
|
# DNS64 support
|
|
named_dns64: false
|
|
named_dns64_clients:
|
|
- any
|
|
|
|
# Set Python version
|
|
named_python_version: "{{ named_default_python_version }}"
|
|
|
|
# Log file
|
|
named_log: data/named.run
|