RedXen
/
aports
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
aports/config/unbound/APKBUILD

77 lines
2.2 KiB
Plaintext
Raw Normal View History

HTTP deployment commit, see entire commit
2020-12-18 20:50:42 +00:00
# Contributor: Alex Denes <caskd@redxen.eu>
# Maintainer: Alex Denes <caskd@redxen.eu>
Use common format for configs
2021-02-07 21:36:32 +00:00
Reorganization, automation and more - More templating and inheritance - New commands + rx_replace + rx_install + rx_cpkgdir - More transparency with secrets being sourced as variables and replaced - Modularization of configs + telegraf + nginx (partial) + fastd + wireguard + unbound - Split of unbound configurations and bind zones - Bumping of key versions (rolling keys) + ZSK/KSK + OpenDKIM - Relaxed permission defaults and other smaller tweaks...
2021-06-01 23:17:41 +00:00
. ../APKBUILD-config.template
Use common format for configs
2021-02-07 21:36:32 +00:00
Separate zones from modules and add automatic unbound module
2021-06-02 15:58:23 +00:00
pkgver=2021.06.02.01
Reorganization, automation and more - More templating and inheritance - New commands + rx_replace + rx_install + rx_cpkgdir - More transparency with secrets being sourced as variables and replaced - Modularization of configs + telegraf + nginx (partial) + fastd + wireguard + unbound - Split of unbound configurations and bind zones - Bumping of key versions (rolling keys) + ZSK/KSK + OpenDKIM - Relaxed permission defaults and other smaller tweaks...
2021-06-01 23:17:41 +00:00
pkgrel=0
Add binary deps to service and add configuration addition deps to config
2021-02-09 19:11:29 +00:00
depends="alpine-baselayout ca-certificates-bundle dns-root-hints dnssec-root"
Reorganization, automation and more - More templating and inheritance - New commands + rx_replace + rx_install + rx_cpkgdir - More transparency with secrets being sourced as variables and replaced - Modularization of configs + telegraf + nginx (partial) + fastd + wireguard + unbound - Split of unbound configurations and bind zones - Bumping of key versions (rolling keys) + ZSK/KSK + OpenDKIM - Relaxed permission defaults and other smaller tweaks...
2021-06-01 23:17:41 +00:00
checkdepends="unbound"
options="checkroot"
HTTP deployment commit, see entire commit
2020-12-18 20:50:42 +00:00
source="
base.conf
Separate zones from modules and add automatic unbound module
2021-06-02 15:58:23 +00:00
acl.conf
rctrl.conf
wireguard.conf
"
subpackages="
$pkgname-acl
$pkgname-rctrl
$pkgname-wireguard
HTTP deployment commit, see entire commit
2020-12-18 20:50:42 +00:00
"
DNSSEC tweaks - Add package to generate KS and ZS keys - Clean up the build - Generalize domain support
2021-04-08 00:39:17 +00:00
Separate zones from modules and add automatic unbound module
2021-06-02 15:58:23 +00:00
_zones="
redxen
crxn
internal
"
for i in $_zones; do
checkdepends="$checkdepends redxen-data-bindzone-$i"
subpackages="$subpackages $pkgname-auth-$i:_zone_ins"
source="$source auth-$i.conf"
Reorganization, automation and more - More templating and inheritance - New commands + rx_replace + rx_install + rx_cpkgdir - More transparency with secrets being sourced as variables and replaced - Modularization of configs + telegraf + nginx (partial) + fastd + wireguard + unbound - Split of unbound configurations and bind zones - Bumping of key versions (rolling keys) + ZSK/KSK + OpenDKIM - Relaxed permission defaults and other smaller tweaks...
2021-06-01 23:17:41 +00:00
done
HTTP deployment commit, see entire commit
2020-12-18 20:50:42 +00:00
check() {
msg "Checking configuration validity"
*/unbound: Add pleroma and migrate to BIND zonefiles for authoritative DNS
2020-12-27 18:16:04 +00:00
Separate zones from modules and add automatic unbound module
2021-06-02 15:58:23 +00:00
for i in $source; do
/usr/sbin/unbound-checkconf "$i"
DNSSEC tweaks - Add package to generate KS and ZS keys - Clean up the build - Generalize domain support
2021-04-08 00:39:17 +00:00
done
HTTP deployment commit, see entire commit
2020-12-18 20:50:42 +00:00
}
Reorganization, automation and more - More templating and inheritance - New commands + rx_replace + rx_install + rx_cpkgdir - More transparency with secrets being sourced as variables and replaced - Modularization of configs + telegraf + nginx (partial) + fastd + wireguard + unbound - Split of unbound configurations and bind zones - Bumping of key versions (rolling keys) + ZSK/KSK + OpenDKIM - Relaxed permission defaults and other smaller tweaks...
2021-06-01 23:17:41 +00:00
package() {
rx_install base.conf
HTTP deployment commit, see entire commit
2020-12-18 20:50:42 +00:00
}
Separate zones from modules and add automatic unbound module
2021-06-02 15:58:23 +00:00
acl() {
_rx_installdir="$_rx_installdir/module" rx_install acl.conf
}
rctrl() {
_rx_installdir="$_rx_installdir/module" rx_install rctrl.conf
}
wireguard() {
install_if="$pkgname redxen-config-wireguard"
_rx_installdir="$_rx_installdir/module" rx_install wireguard.conf
}
_zone_ins() {
Reorganization, automation and more - More templating and inheritance - New commands + rx_replace + rx_install + rx_cpkgdir - More transparency with secrets being sourced as variables and replaced - Modularization of configs + telegraf + nginx (partial) + fastd + wireguard + unbound - Split of unbound configurations and bind zones - Bumping of key versions (rolling keys) + ZSK/KSK + OpenDKIM - Relaxed permission defaults and other smaller tweaks...
2021-06-01 23:17:41 +00:00
_modname="${subpkgname##${pkgname}-}"
Separate zones from modules and add automatic unbound module
2021-06-02 15:58:23 +00:00
_authname="${_modname##auth-}"
depends="$depends redxen-data-bindzone-$_authname"
Reorganization, automation and more - More templating and inheritance - New commands + rx_replace + rx_install + rx_cpkgdir - More transparency with secrets being sourced as variables and replaced - Modularization of configs + telegraf + nginx (partial) + fastd + wireguard + unbound - Split of unbound configurations and bind zones - Bumping of key versions (rolling keys) + ZSK/KSK + OpenDKIM - Relaxed permission defaults and other smaller tweaks...
2021-06-01 23:17:41 +00:00
_rx_installdir="$_rx_installdir/module" rx_install "$_modname".conf
Add CRXN DNS
2021-02-17 12:26:06 +00:00
}
Reorganization, automation and more - More templating and inheritance - New commands + rx_replace + rx_install + rx_cpkgdir - More transparency with secrets being sourced as variables and replaced - Modularization of configs + telegraf + nginx (partial) + fastd + wireguard + unbound - Split of unbound configurations and bind zones - Bumping of key versions (rolling keys) + ZSK/KSK + OpenDKIM - Relaxed permission defaults and other smaller tweaks...
2021-06-01 23:17:41 +00:00
sha512sums="
bcb4c8e66d185f56751cc8f44ced802622abbd91bad08bae38b549d0e38438cd876784ac432ddd30347c4f6e5f0c205aafb085beecb1a58224074b3ac2b8f817 base.conf
*/unbound: Add pleroma and migrate to BIND zonefiles for authoritative DNS
2020-12-27 18:16:04 +00:00
75709787e0872197c83def93b343550934f6b2e4903873aaf72f357fb8b4a1d7c5b8ba84913f052ad01aeca03f58ca589a22bf867c1c2e40e01f9588c7c580c4 acl.conf
d94ad338e2ea43c3ecdc62c861eddc0bb706807b738dd985309bcdf0b5fb435d7260bf272e2bbe40a774ec5b8fa49cbf23624c2c5213eea94f4f14aa3720abfa rctrl.conf
Separate zones from modules and add automatic unbound module
2021-06-02 15:58:23 +00:00
201fe7cf481cf7b0614d677804d4dee3db57f447bd2cde8c61a1dd337495f81dc1b62dad5cf031fc37934250523aaba6df129441b10b71aa003ceee7e56d057b wireguard.conf
a013d162067027aabde0ce0810bfa9ac7e329ad77a52c93afed2faa56f92c73f5933327b70c2ba5e0ef663852462185653aef5138c62da8043c19179cb3e2607 auth-redxen.conf
e678f22aa89a9df3db35921a20225abd2b0408ff1e6815b12ec135a740d95bc8a0669aebae3d0945e29c3896f43a0da88375a1c241fabcd410a65e47466c1f6d auth-crxn.conf
b854e0d09875653676336ffc9e36690b2abe1a565f25fafd9cd0940cb5b6d8bb57e1d43a7a9b072c11fcadc9073e1dceceea9a517e4d55bee1d217fd1bd759e6 auth-internal.conf
Reorganization, automation and more - More templating and inheritance - New commands + rx_replace + rx_install + rx_cpkgdir - More transparency with secrets being sourced as variables and replaced - Modularization of configs + telegraf + nginx (partial) + fastd + wireguard + unbound - Split of unbound configurations and bind zones - Bumping of key versions (rolling keys) + ZSK/KSK + OpenDKIM - Relaxed permission defaults and other smaller tweaks...
2021-06-01 23:17:41 +00:00
"