prepare dns secondaries
This commit is contained in:
@@ -1,55 +1,58 @@
|
||||
- name: nameserver | powerdns-server | install packages
|
||||
- name: Nameserver | powerdns-server | install packages
|
||||
package:
|
||||
name: "{{ powerdns_server_package }}"
|
||||
state: present
|
||||
|
||||
- name: nameserver | powerdns-server | install backends
|
||||
- name: Nameserver | powerdns-server | install backends
|
||||
package:
|
||||
name: "{{ item.package }}"
|
||||
state: latest
|
||||
with_items: "{{ powerdns_backends }}"
|
||||
|
||||
- name: nameserver | powerdns-server | install and configure database
|
||||
- name: Nameserver | powerdns-server | install and configure database
|
||||
when:
|
||||
- powerdns_primary is defined
|
||||
- powerdns_primary is true
|
||||
block:
|
||||
- include_role: name=database # required. The name of the role to be executed.
|
||||
|
||||
- name: nameserver | powerdns-server | install python mysql client
|
||||
- name: Nameserver | powerdns-server | install python mysql client
|
||||
package:
|
||||
name: "{{ python_mysql_client }}"
|
||||
state: present
|
||||
|
||||
- name: nameserver | powerdns-server | create database
|
||||
- name: Nameserver | powerdns-server | create database
|
||||
mysql_db:
|
||||
name: "{{ pdns_db_name }}" # required. name of the database to add or remove. I(name=all) May only be provided if I(state) is C(dump) or C(import). List of databases is provided with I(state=dump), I(state=present) and I(state=absent). if name=all Works like --all-databases option for mysqldump (Added in 2.0).
|
||||
state: present # not required. choices: present;absent;dump;import. The database state
|
||||
encoding: "utf8" # not required. Encoding mode to use, examples include C(utf8) or C(latin1_swedish_ci)
|
||||
config_file: "/etc/mysql/my.cnf" # not required. Specify a config file from which user and password are to be read.
|
||||
login_unix_socket: "{{ pdns_mysql_socket }}" # not required. The path to a Unix domain socket for local connections.
|
||||
name: "{{ pdns_db_name }}"
|
||||
state: present
|
||||
encoding: "utf8"
|
||||
config_file: "/etc/mysql/my.cnf"
|
||||
login_unix_socket: "{{ pdns_mysql_socket }}"
|
||||
register: database_exists
|
||||
|
||||
- name: nameserver | powerdns-server | import database
|
||||
- name: Nameserver | powerdns-server | import database
|
||||
mysql_db:
|
||||
name: "{{ pdns_db_name }}"
|
||||
state: import
|
||||
target: "{{ pdns_mysql_schema }}" # not required. Location, on the remote host, of the dump file to read from or write to. Uncompressed SQL files (C(.sql)) as well as bzip2 (C(.bz2)), gzip (C(.gz)) and xz (Added in 2.0) compressed files are supported.
|
||||
config_file: "/etc/mysql/my.cnf" # not required. Specify a config file from which user and password are to be read.
|
||||
login_unix_socket: "{{ pdns_mysql_socket }}" # not required. The path to a Unix domain socket for local connections.
|
||||
target: "{{ pdns_mysql_schema }}"
|
||||
config_file: "/etc/mysql/my.cnf"
|
||||
login_unix_socket: "{{ pdns_mysql_socket }}"
|
||||
when: database_exists.changed
|
||||
|
||||
- name: nameserver | powerdns-server | create database user
|
||||
- name: Nameserver | powerdns-server | create database user
|
||||
mysql_user:
|
||||
name: "{{ pdns_db_user }}" # required. Name of the user (role) to add or remove.
|
||||
name: "{{ pdns_db_user }}"
|
||||
password: "{{ pdns_db_passwd | default(lookup('password', '/etc/powerdns/pdns.d/.mysqlpw length=20')) }}" # not required. Set the user's password..
|
||||
host: localhost
|
||||
priv: "{{ pdns_db_name }}.*:ALL" # not required. MySQL privileges string in the format: C(db.table:priv1,priv2). Multiple privileges can be specified by separating each one using a forward slash: C(db.table:priv/db.table:priv). The format is based on MySQL C(GRANT) statement. Database and table names can be quoted, MySQL-style. If column privileges are used, the C(priv1,priv2) part must be exactly as returned by a C(SHOW GRANT) statement. If not followed, the module will always report changes. It includes grouping columns by permission (C(SELECT(col1,col2)) instead of C(SELECT(col1),SELECT(col2))).
|
||||
append_privs: False # not required. Append the privileges defined by priv to the existing ones for this user instead of overwriting existing ones.
|
||||
sql_log_bin: True # not required. Whether binary logging should be enabled or disabled for the connection.
|
||||
state: present # not required. choices: absent;present. Whether the user should exist. When C(absent), removes the user.
|
||||
update_password: on_create # not required. choices: always;on_create. C(always) will update passwords if they differ. C(on_create) will only set the password for newly created users.
|
||||
config_file: "/etc/mysql/my.cnf" # not required. Specify a config file from which user and password are to be read.
|
||||
login_unix_socket: "{{ pdns_mysql_socket }}" # not required. The path to a Unix domain socket for local connections.
|
||||
priv: "{{ pdns_db_name }}.*:ALL"
|
||||
append_privs: False
|
||||
sql_log_bin: True
|
||||
state: present
|
||||
update_password: on_create
|
||||
config_file: "/etc/mysql/my.cnf"
|
||||
login_unix_socket: "{{ pdns_mysql_socket }}"
|
||||
|
||||
- name: nameserver | powerdns-server | create database users for secondaries
|
||||
- name: Nameserver | powerdns-server | create database users for secondaries
|
||||
mysql_user:
|
||||
name: "{{ pdns_db_user }}"
|
||||
password: "{{ pdns_db_passwd | default(lookup('password', '/etc/powerdns/pdns.d/.mysqlpw length=20')) }}"
|
||||
@@ -62,8 +65,18 @@
|
||||
config_file: "/etc/mysql/my.cnf"
|
||||
login_unix_socket: "{{ pdns_mysql_socket }}"
|
||||
loop: "{{ pdns_secondaries }}"
|
||||
|
||||
- name: nameserver | powerdns-server | copy config
|
||||
|
||||
- name: Nameserver | powerdns-server | configure mysql for network
|
||||
ini_file:
|
||||
path: "/etc/mysql/mariadb.conf.d/50-server.cnf"
|
||||
section: "mysqld"
|
||||
option: "bind-address"
|
||||
value: "{{ ansible_default_ipv4.address }}"
|
||||
state: present
|
||||
no_extra_spaces: False # not required. Do not insert spaces before and after '=' symbol.
|
||||
notify: restart_mysqld
|
||||
|
||||
- name: Nameserver | powerdns-server | copy config
|
||||
template:
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
@@ -74,17 +87,28 @@
|
||||
loop:
|
||||
- { src: "powerdns-server-pri-mysql-config.j2", dest: "/etc/powerdns/pdns.d/mysql.conf" }
|
||||
- { src: "powerdns-server-pri-api-config.j2", dest: "/etc/powerdns/pdns.d/api.conf"}
|
||||
when:
|
||||
- powerdns_primary is defined
|
||||
- powerdns_primary is true
|
||||
notify: restart_pdns
|
||||
|
||||
- name: nameserver | powerdns-server | disable bind
|
||||
- name: Nameserver | powerdns-server | configure backends for secondaries
|
||||
when:
|
||||
- powerdns_primary is defined
|
||||
- powerdns_primary is false
|
||||
- powerdns_secondary is defined
|
||||
- powerdns_secondary is true
|
||||
template:
|
||||
src: "powerdns-server-pri-mysql-config.j2"
|
||||
dest: "/etc/powerdns/pdns.d/mysql.conf"
|
||||
mode: "0644"
|
||||
owner: "root"
|
||||
group: "root"
|
||||
force: no
|
||||
|
||||
- name: Nameserver | powerdns-server | disable bind
|
||||
block:
|
||||
- name: nameserver | powerdns-server | get running services
|
||||
- name: Nameserver | powerdns-server | get running services
|
||||
service_facts:
|
||||
|
||||
- name: nameserver | powerdns-server | disable bind
|
||||
- name: Nameserver | powerdns-server | disable bind
|
||||
service:
|
||||
name: "named"
|
||||
state: stopped
|
||||
@@ -93,7 +117,7 @@
|
||||
vars:
|
||||
service_names: "{{ services|dict2items|map(attribute='value.name')|list }}"
|
||||
|
||||
- name: nameserver | powerdns-server | enable service
|
||||
- name: Nameserver | powerdns-server | enable service
|
||||
service:
|
||||
name: "pdns"
|
||||
state: started
|
||||
|
||||
@@ -3,53 +3,53 @@
|
||||
tags: always
|
||||
|
||||
- block:
|
||||
- name: nameserver | unbound | install and configure
|
||||
block:
|
||||
- name: nameserver | unbound | install
|
||||
include_tasks: install_unbound.yml
|
||||
- name: nameserver | unbound | configure
|
||||
include_tasks: configure_unbound_snmpd.yml
|
||||
- name: Nameserver | unbound | install and configure
|
||||
when:
|
||||
- unbound is defined
|
||||
- unbound is true
|
||||
- powerdns_recursor is not defined or powerdns_recursor is false
|
||||
block:
|
||||
- name: Nameserver | unbound | install
|
||||
include_tasks: install_unbound.yml
|
||||
- name: Nameserver | unbound | configure
|
||||
include_tasks: configure_unbound_snmpd.yml
|
||||
|
||||
- name: nameserver | unbound | disable systemd-resolved
|
||||
- name: Nameserver | unbound | disable systemd-resolved
|
||||
include_tasks: disable-systemd-resolved.yml
|
||||
when: bind is true or unbound is true or powerdns_recursor is true
|
||||
|
||||
- name: nameserver | powerdns-recursor | install and configure
|
||||
block:
|
||||
- name: nameserver| powerdns-recursor | install
|
||||
include_tasks: install_powerdns_recursor.yml
|
||||
- name: nameserver | powerdns-recursor | configure
|
||||
include_tasks: configure_powerdns_recursor_snmpd.yml
|
||||
- name: Nameserver | powerdns-recursor | install and configure
|
||||
when:
|
||||
- powerdns_recursor is defined
|
||||
- powerdns_recursor is true
|
||||
- unbound is not defined or unbound is false
|
||||
|
||||
- name: nameserver | bind | install and configure
|
||||
block:
|
||||
- name: nameserver | bind | install
|
||||
include_tasks: install_bind.yml
|
||||
- name: nameserver | bind | configure
|
||||
include_tasks: configure_bind_snmpd.yml
|
||||
- name: Nameserver| powerdns-recursor | install
|
||||
include_tasks: install_powerdns_recursor.yml
|
||||
- name: Nameserver | powerdns-recursor | configure
|
||||
include_tasks: configure_powerdns_recursor_snmpd.yml
|
||||
|
||||
- name: Nameserver | bind | install and configure
|
||||
when:
|
||||
- bind is defined
|
||||
- bind is true
|
||||
- powerdns_server is not defined or powerdns_server is false
|
||||
|
||||
- name: nameserver | powerdns-server | install and configure
|
||||
block:
|
||||
- name: nameserver | powerdns-server | install
|
||||
include_tasks: install_powerdns_server.yml
|
||||
- name: nameserver | powerdns-server | configure
|
||||
include_tasks: configure_powerdns_server_snmpd.yml
|
||||
- name: Nameserver | bind | install
|
||||
include_tasks: install_bind.yml
|
||||
- name: Nameserver | bind | configure
|
||||
include_tasks: configure_bind_snmpd.yml
|
||||
|
||||
- name: Nameserver | powerdns-server | install and configure
|
||||
when:
|
||||
- powerdns_server is defined
|
||||
- powerdns_server is true
|
||||
- bind is not defined or bind is false
|
||||
block:
|
||||
- name: Nameserver | powerdns-server | install
|
||||
include_tasks: install_powerdns_server.yml
|
||||
- name: Nameserver | powerdns-server | configure
|
||||
include_tasks: configure_powerdns_server_snmpd.yml
|
||||
|
||||
rescue:
|
||||
- set_fact: task_failed=true
|
||||
|
||||
Reference in New Issue
Block a user