RedXen/ansible-dns
RedXen
/
ansible-dns
Archived
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Remove ratelimits for now and serve full reponses, update SOA

This commit is contained in:
Alex 2020-05-31 20:23:20 +02:00
parent 2ccb694505
commit 5e0c3647e4
Signed by: caskd
GPG Key ID: F92BA85F61F4C173
2 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
templates/redxen-dns.conf.j2
View File

@ -4,7 +4,7 @@ server:
local-data: "redxen.eu. 10800 IN NS {{ host }}.redxen.eu" local-data: "redxen.eu. 10800 IN NS {{ host }}.redxen.eu"
{% endfor %} {% endfor %}
local-data: "redxen.eu. IN SOA n0.redxen.eu admin.redxen.eu 2020053001 86400 7200 3600000 172800" local-data: "redxen.eu. IN SOA n0.redxen.eu admin.redxen.eu 2020053102 1800 120 604800 3600"
{% for record in unbound.public.TXT %} {% for record in unbound.public.TXT %}
local-data: "{{ record.name }}redxen.eu. 86400 IN TXT {{ record.content }}" local-data: "{{ record.name }}redxen.eu. 86400 IN TXT {{ record.content }}"

7
templates/unbound.conf.j2
View File

@ -4,11 +4,12 @@ server:
directory: "/etc/unbound" directory: "/etc/unbound"
access-control: 0.0.0.0/0 refuse_non_local access-control: 0.0.0.0/0 refuse_non_local
access-control: ::/0 refuse_non_local access-control: ::/0 refuse_non_local
# Local Host # Local Host
access-control: 127.0.0.0/24 allow access-control: 127.0.0.0/8 allow
# Wireguard Range # Wireguard Range
access-control: 172.22.12.0/24 allow access-control: 172.22.12.0/24 allow
# log-replies: yes #log-replies: yes
interface: {{ unbound.listen.ipv4 }} interface: {{ unbound.listen.ipv4 }}
interface: {{ unbound.listen.ipv6 }} interface: {{ unbound.listen.ipv6 }}
extended-statistics: yes extended-statistics: yes
@ -17,10 +18,10 @@ server:
trust-anchor-file: /usr/share/dns/root.key trust-anchor-file: /usr/share/dns/root.key
tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
port: {{ unbound.port }} port: {{ unbound.port }}
ratelimit: 20
prefetch: yes prefetch: yes
prefetch-key: yes prefetch-key: yes
do-daemonize: no do-daemonize: no
minimal-responses: no
logfile: "" logfile: ""
cache-min-ttl: 60 cache-min-ttl: 60
harden-glue: yes harden-glue: yes