s3lph/ansible-collection-nameserver
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add support for on-secondary signing

Browse source
This commit is contained in:
s3lph 2023-04-04 20:54:24 +02:00
parent b1795f2e76
commit 88996a3700
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
roles/knot/templates/etc/knot/knot.conf.j2
View file

@ -68,7 +68,7 @@ acl:
key: {{ hostvars[remote].knot_tsig_key.name }}
{% endif %}
{% for address in hostvars[remote].knot_dns_addresses %}
address: "{{ address }}"
address: "{{ address.split('@')[0] }}"
{% endfor %}
{% endfor %}
@ -86,7 +86,7 @@ acl:
submission:
{% for zone in zones %}
{% if inventory_hostname in zone.masters %}
{% if inventory_hostname in zone.masters or (inventory_hostname in zone.replicas and zone.sign_on_secondary | default(false)) %}
- id: submission-{{ zone.name }}
check-interval: {{ knot_dnssec_submission_check_interval }}