foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

unbound: Add better failover config

Browse source
This commit is contained in:
Timo Makinen 2025-01-18 19:14:08 +00:00
parent 107a2cd48b
commit d4bfc7586f
5 changed files with 24 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
group_vars/dnagw.yml
View file

@ -12,6 +12,18 @@ network_vip_interfaces:
netmask: 255.255.252.0
pass: "{{ vip10_pass }}"
priority: 120
- device: vio0
vhid: 11
ipaddr: 172.20.20.11
netmask: 255.255.252.0
pass: "{{ vip11_pass }}"
priority: "{{ vip11_priority }}"
- device: vio0
vhid: 12
ipaddr: 172.20.20.12
netmask: 255.255.252.0
pass: "{{ vip12_pass }}"
priority: "{{ vip12_priority }}"
network_ether_interfaces:
- device: vio1
proto: none

2
host_vars/dna-gw01.home.foo.sh.yml
View file

@ -10,3 +10,5 @@ network_interfaces:
- device: vio1
vlan: 103
proto: none
vip11_priority: 240
vip12_priority: 120

2
host_vars/dna-gw02.home.foo.sh.yml
View file

@ -10,3 +10,5 @@ network_interfaces:
- device: vio1
vlan: 103
proto: none
vip11_priority: 120
vip12_priority: 240

4
roles/unbound/templates/unbound.conf.dna-gw01.home.foo.sh.j2
View file

@ -8,6 +8,10 @@ server:
interface: 172.20.20.10@53
interface: 172.20.20.10@853
interface: 172.20.20.11@53
interface: 172.20.20.11@853
interface: 172.20.20.12@53
interface: 172.20.20.12@853
interface: 172.20.21.1@53
tls-service-key: {{ tls_private }}/dns.home.foo.sh.key

4
roles/unbound/templates/unbound.conf.dna-gw02.home.foo.sh.j2
View file

@ -8,6 +8,10 @@ server:
interface: 172.20.20.10@53
interface: 172.20.20.10@853
interface: 172.20.20.11@53
interface: 172.20.20.11@853
interface: 172.20.20.12@53
interface: 172.20.20.12@853
interface: 172.20.21.2@53
tls-service-key: {{ tls_private }}/dns.home.foo.sh.key