diff --git a/group_vars/nsdservers.yml b/group_vars/nsdservers.yml index cc7cdb5..8848918 100644 --- a/group_vars/nsdservers.yml +++ b/group_vars/nsdservers.yml @@ -13,6 +13,7 @@ zones: - name: nupes.social parking: true - name: pipoworld.fr + - name: sebicomics.com tsig_key: !vault | $ANSIBLE_VAULT;1.1;AES256 diff --git a/roles/nsd/templates/zones/sebicomics.com.zone.j2 b/roles/nsd/templates/zones/sebicomics.com.zone.j2 new file mode 100644 index 0000000..561bd18 --- /dev/null +++ b/roles/nsd/templates/zones/sebicomics.com.zone.j2 @@ -0,0 +1,23 @@ +$TTL 86400 +@ IN SOA {{ groups['master_nsdservers'] | first }}. tech.ovh.net. ( + {{ dns_serial }}; timestamp serial number + 28800; Refresh + 7200; Retry + 864000; Expire + 86400; Min TTL + ) + +{% for server in groups['nsdservers'] %} + IN NS {{ server }}. +{% endfor %} + +$ORIGIN {{ item.name }}. +@ IN CAA 0 issue "letsencrypt.org" +@ IN MX 0 . +@ IN A 82.66.135.228 +@ IN AAAA 2a01:e0a:9bd:2811::17 +@ IN TXT "v=spf1 -all" +@ IN TXT "spf2.0/mfrom -all" +@ IN TXT "google-site-verification=Ptj7up6CWDNVy_AQjKrJf9yY08Tu7OTE30XIgG-ISGU" +_dmarc IN TXT "v=DMARC1;p=reject;pct=100;sp=reject;aspf=s;" +{{ web_hostname_block }}