Add linse.freifunk-mwu.de

* Update Playbook dns.yml to manage linse as the external dns master server
This commit is contained in:
Tobias Hachmer 2019-03-22 20:34:54 +01:00
parent d194d6e936
commit 0c6cec55e3
No known key found for this signature in database
GPG key ID: E112788464CA5C60
4 changed files with 129 additions and 0 deletions

View file

@ -1,2 +1,3 @@
[ffmwu-mesh-services] [ffmwu-mesh-services]
kichererbse.freifunk-mwu.de kichererbse.freifunk-mwu.de
linse.freifunk-mwu.de

View file

@ -165,6 +165,48 @@ wireguard_networks:
- kichererbse - kichererbse
- suesskartoffel - suesskartoffel
port: 50020 port: 50020
- ipv4: 10.87.253.42/31
ipv6: fd86:b4dc:4b1e:fd::2a/127
peers:
- ingwer
- linse
port: 50021
- ipv4: 10.87.253.44/31
ipv6: fd86:b4dc:4b1e:fd::2c/127
peers:
- lotuswurzel
- linse
port: 50022
- ipv4: 10.87.253.46/31
ipv6: fd86:b4dc:4b1e:fd::2e/127
peers:
- spinat
- linse
port: 50023
- ipv4: 10.87.253.48/31
ipv6: fd86:b4dc:4b1e:fd::30/127
peers:
- uffschnitt
- linse
port: 50024
- ipv4: 10.87.253.50/31
ipv6: fd86:b4dc:4b1e:fd::32/127
peers:
- wasserfloh
- linse
port: 50025
- ipv4: 10.87.253.52/31
ipv6: fd86:b4dc:4b1e:fd::34/127
peers:
- suesskartoffel
- linse
port: 50026
- ipv4: 10.87.253.54/31
ipv6: fd86:b4dc:4b1e:fd::36/127
peers:
- kichererbse
- linse
port: 50027
fastd_groups: fastd_groups:
- ffmwu-gateways - ffmwu-gateways
@ -594,6 +636,12 @@ bgp_legacy_servers:
ipv4: 10.37.0.42 ipv4: 10.37.0.42
ipv6: fd37:b4dc:4b1e::a25:2a ipv6: fd37:b4dc:4b1e::a25:2a
dns_external:
slaves:
- ns1.treck.de
- ns2.treck.de
- ns3.treck.de
dns_internal: dns_internal:
master_ipv4: 10.87.255.67 master_ipv4: 10.87.255.67
master_ipv6: fd86:b4dc:4b1e:ff::43 master_ipv6: fd86:b4dc:4b1e:ff::43

View file

@ -0,0 +1,8 @@
---
server_type: "mesh-service"
magic: 71
nodejs_major_version: "10"
http_dns_prefix: "dns-ext"

View file

@ -72,3 +72,75 @@
sqla_db_host: "127.0.0.1" sqla_db_host: "127.0.0.1"
sqla_db_name: "pdns-admin" sqla_db_name: "pdns-admin"
sqlalchemy_track_modifications: True sqlalchemy_track_modifications: True
- name: Manage DNS External Master Server.
hosts: linse.freifunk-mwu.de
roles:
- service-nginx
- nodejs
- yarn
- geerlingguy.mysql
- powerdns.pdns
- pdns-admin
vars:
mysql_root_password: "{{ lookup('passwordstore', inventory_hostname_short + '/mysql_root subkey=secret') }}"
mysql_databases:
- name: "pdns-admin"
encoding: "utf8"
collation: "utf8_general_ci"
mysql_users:
- name: "pdns-admin"
host: "localhost"
password: "{{ lookup('passwordstore', inventory_hostname_short + '/mysql_pdns-admin subkey=secret') }}"
priv: "pdns-admin.*:ALL"
mysql_max_binlog_size: "100M"
mysql_expire_logs_days: "10"
mysql_bind_address: "127.0.0.1"
pdns_install_repo: "{{ pdns_auth_powerdns_repo_41 }}"
pdns_mysql_databases_credentials:
gmysql:
priv_user: root
priv_password: "{{ lookup('passwordstore', inventory_hostname_short + '/mysql_root subkey=secret') }}"
priv_host:
- "localhost"
pdns_config:
allow-axfr-ips: "{% for slave in dns_external.slaves %}{{ lookup('dig', slave, 'qtype=A') | ipaddr('address') }}{% if not loop.last %},{% endif %}{% endfor %}"
api: "yes"
api-key: "{{ lookup('passwordstore', inventory_hostname_short + '/pdns_apikey') }}"
default-soa-name: "{{ inventory_hostname }}"
default-soa-mail: "admin.freifunk-mwu.de"
local-port: "53"
local-address: "127.0.0.1,{{ loopback_net_ipv4 | ipaddr(magic) | ipaddr('address') }},{{ ansible_default_ipv4.address | ipaddr('address') }}"
local-ipv6: "::1,{{ loopback_net_ipv6 | ipaddr(magic) | ipaddr('address') }},{{ ansible_default_ipv6.address | ipaddr('address') }}"
master: True
tcp-fast-open: "50"
version-string: "anonymous"
webserver: "yes"
webserver-address: "127.0.0.1"
webserver-allow-from: "0.0.0.0/0,::/0"
webserver-password: "{{ lookup('passwordstore', inventory_hostname_short + '/pdns_webserver') }}"
pdns_backends:
gmysql:
host: "127.0.0.1"
user: "powerdns"
password: "{{ lookup('passwordstore', inventory_hostname_short + '/mysql_powerdns subkey=secret') }}"
dbname: "powerdns"
pdns_admin_global_config:
secret_key: "{{ lookup('passwordstore', inventory_hostname_short + '/pdnsadmin_secretkey') }}"
login_title: "Freifunk MWU DNS Management"
log_level: "INFO"
log_file: "pdns-admin.log"
pdns_admin_database_config:
sqla_db_user: "pdns-admin"
sqla_db_password: "{{ lookup('passwordstore', inventory_hostname_short + '/mysql_pdns-admin subkey=secret') }}"
sqla_db_host: "127.0.0.1"
sqla_db_name: "pdns-admin"
sqlalchemy_track_modifications: True