add "how to use" and "tips"
This commit is contained in:
parent
146fe260c6
commit
2caa2a9a2d
89
README.md
89
README.md
@ -4,3 +4,92 @@
|
|||||||
* git clone
|
* git clone
|
||||||
* Run 'rndc-confgen | grep '^key "rndc-key" {' -A3 > rndc.key'
|
* Run 'rndc-confgen | grep '^key "rndc-key" {' -A3 > rndc.key'
|
||||||
* Restart bind service
|
* Restart bind service
|
||||||
|
|
||||||
|
## How to use :
|
||||||
|
|
||||||
|
The repository is thought like this:
|
||||||
|
|
||||||
|
```
|
||||||
|
.
|
||||||
|
├── named.conf # default file, have only include
|
||||||
|
├── named.conf.keys # have all TSIG keys and rndc config
|
||||||
|
├── named.conf.options # have all bind options
|
||||||
|
├── named.conf.view # have all views options
|
||||||
|
├── views
|
||||||
|
│ ├── local.conf # have all zones options of the "local" view
|
||||||
|
│ └── public.conf # have all zones options of the "public" view
|
||||||
|
└── zones
|
||||||
|
├── local # directory with all zones records of the "local" view
|
||||||
|
└── public # directory with all zones records of the "public" view
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||
|
and to add zone, for exemple in local view, you have to add this in the **views/local.conf** file :
|
||||||
|
|
||||||
|
```
|
||||||
|
zone "exemple.com" {
|
||||||
|
type master;
|
||||||
|
file "/etc/bind/zones/local/exemple.com.conf";
|
||||||
|
};
|
||||||
|
```
|
||||||
|
|
||||||
|
then add **zones/local/exemple.com.conf** file with all your records like this :
|
||||||
|
|
||||||
|
```
|
||||||
|
$ORIGIN example.com.
|
||||||
|
$TTL 86400
|
||||||
|
@ SOA dns1.example.com. hostmaster.example.com. (
|
||||||
|
2001062501 ; serial
|
||||||
|
21600 ; refresh after 6 hours
|
||||||
|
3600 ; retry after 1 hour
|
||||||
|
604800 ; expire after 1 week
|
||||||
|
86400 ) ; minimum TTL of 1 day
|
||||||
|
;
|
||||||
|
;
|
||||||
|
NS dns1.example.com.
|
||||||
|
NS dns2.example.com.
|
||||||
|
dns1 A 10.0.1.1
|
||||||
|
AAAA aaaa:bbbb::1
|
||||||
|
dns2 A 10.0.1.2
|
||||||
|
AAAA aaaa:bbbb::2
|
||||||
|
;
|
||||||
|
;
|
||||||
|
@ MX 10 mail.example.com.
|
||||||
|
MX 20 mail2.example.com.
|
||||||
|
mail A 10.0.1.5
|
||||||
|
AAAA aaaa:bbbb::5
|
||||||
|
mail2 A 10.0.1.6
|
||||||
|
AAAA aaaa:bbbb::6
|
||||||
|
;
|
||||||
|
;
|
||||||
|
; This sample zone file illustrates sharing the same IP addresses for multiple services:
|
||||||
|
;
|
||||||
|
services A 10.0.1.10
|
||||||
|
AAAA aaaa:bbbb::10
|
||||||
|
A 10.0.1.11
|
||||||
|
AAAA aaaa:bbbb::11
|
||||||
|
|
||||||
|
ftp CNAME services.example.com.
|
||||||
|
www CNAME services.example.com.
|
||||||
|
```
|
||||||
|
|
||||||
|
|
||||||
|
### Tips :
|
||||||
|
|
||||||
|
|
||||||
|
#### Create TSIG key :
|
||||||
|
|
||||||
|
To create TSIG key, you have to create a shared base64 data like this :
|
||||||
|
|
||||||
|
```
|
||||||
|
echo $(date) | openssl base64
|
||||||
|
```
|
||||||
|
|
||||||
|
and add the following in the **named.conf.keys** file
|
||||||
|
|
||||||
|
```
|
||||||
|
key "key-name" {
|
||||||
|
algorithm hmac-sha256;
|
||||||
|
secret "< YOUR BASE64 >";
|
||||||
|
};
|
||||||
|
```
|
Loading…
Reference in New Issue
Block a user