foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

unbound: Use DNS over TLS for forward zones

Browse source
This commit is contained in:
Timo Makinen 2021-09-30 14:50:23 +00:00
parent a9ce2aa7bf
commit 4c8ddf5646
3 changed files with 12 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

7
roles/unbound/templates/unbound.conf.nms01.home.foo.sh.j2
View file

@ -13,6 +13,9 @@ server:
hide-identity: yes hide-identity: yes
hide-version: yes hide-version: yes
tls-upstream: yes
tls-cert-bundle: {{ tls_bundle }}
chroot: "" chroot: ""
unblock-lan-zones: yes unblock-lan-zones: yes
@ -23,9 +26,7 @@ remote-control:
forward-zone: forward-zone:
name: "." name: "."
forward-addr: 172.20.20.10 forward-addr: 172.20.20.10@853#dns.home.foo.sh
forward-addr: 172.20.21.1
forward-addr: 172.20.21.2
auth-zone: auth-zone:
name: "oob.foo.sh" name: "oob.foo.sh"

7
roles/unbound/templates/unbound.conf.print01.home.foo.sh.j2
View file

@ -13,6 +13,9 @@ server:
hide-identity: yes hide-identity: yes
hide-version: yes hide-version: yes
tls-upstream: yes
tls-cert-bundle: {{ tls_bundle }}
chroot: "" chroot: ""
unblock-lan-zones: yes unblock-lan-zones: yes
@ -23,9 +26,7 @@ remote-control:
forward-zone: forward-zone:
name: "." name: "."
forward-addr: 172.20.20.10 forward-addr: 172.20.20.10@853#dns.home.foo.sh
forward-addr: 172.20.21.1
forward-addr: 172.20.21.2
auth-zone: auth-zone:
name: "print.foo.sh" name: "print.foo.sh"

7
roles/unbound/templates/unbound.conf.zm02.home.foo.sh.j2
View file

@ -13,6 +13,9 @@ server:
hide-identity: yes hide-identity: yes
hide-version: yes hide-version: yes
tls-upstream: yes
tls-cert-bundle: {{ tls_bundle }}
chroot: "" chroot: ""
unblock-lan-zones: yes unblock-lan-zones: yes
@ -23,9 +26,7 @@ remote-control:
forward-zone: forward-zone:
name: "." name: "."
forward-addr: 172.20.20.10 forward-addr: 172.20.20.10@853#dns.home.foo.sh
forward-addr: 172.20.21.1
forward-addr: 172.20.21.2
auth-zone: auth-zone:
name: "cam.foo.sh" name: "cam.foo.sh"