Compare commits

...

4 Commits

Author SHA1 Message Date
beu
ac15172e01 add missing info 2024-04-26 10:15:00 +02:00
beu
914ba175da remove old setting 2024-04-26 10:14:53 +02:00
beu
42cf3b788c add info in the doc 2024-04-24 14:13:35 +02:00
beu
f2beb32041 improve doc 2024-04-24 14:06:54 +02:00
2 changed files with 9 additions and 8 deletions

View File

@@ -1,13 +1,15 @@
## How to deploy : ## How to deploy :
* Delete all /etc/bind/ directory * Delete all /etc/bind/ directory
* git clone * git clone https://git.virtit.fr/VirtIT/tpl-bind9 /etc/bind
* rm -r /etc/bind/.git
* Run ```rndc-confgen | grep '^key "rndc-key" {' -A3 > rndc.key``` * Run ```rndc-confgen | grep '^key "rndc-key" {' -A3 > rndc.key```
* Run ```mkdir /var/log/named && chown bind: /var/log/named```
* Restart bind service * Restart bind service
## How to use : ## How to use :
This configuration template is for Bind 9.10.3 in Debian 9. You can find the official configuration [here](https://ftp.isc.org/isc/bind9/9.10.3/doc/arm/Bv9ARM.ch06.html) This configuration template is for Bind in Debian. You can find the official configuration [here](https://ftp.isc.org/isc/bind9/)
The repository is thought like this: The repository is thought like this:
@@ -16,7 +18,7 @@ The repository is thought like this:
├── named.conf # default file, have only include ├── named.conf # default file, have only include
├── named.conf.keys # have all TSIG keys and rndc config ├── named.conf.keys # have all TSIG keys and rndc config
├── named.conf.options # have all bind options ├── named.conf.options # have all bind options
├── named.conf.view # have all views options ├── named.conf.views # have all views options
├── keys # directory with all DNSSEC keys ├── keys # directory with all DNSSEC keys
├── views ├── views
│   ├── local.conf # have all zones options of the "local" view │   ├── local.conf # have all zones options of the "local" view
@@ -27,16 +29,16 @@ The repository is thought like this:
``` ```
and to add zone, for exemple in local view, you have to add this in the **views/local.conf** file : and to add zone, for example in local view, you have to add this in the **views/local.conf** file :
``` ```
zone "exemple.com" { zone "example.com" {
type master; type master;
file "/etc/bind/zones/local/exemple.com.conf"; file "/etc/bind/zones/local/example.com.conf";
}; };
``` ```
then add **zones/local/exemple.com.conf** file with all your records like this : then add **zones/local/example.com.conf** file with all your records like this :
``` ```
$ORIGIN example.com. $ORIGIN example.com.

View File

@@ -4,7 +4,6 @@ options {
key-directory "/etc/bind/keys" ; key-directory "/etc/bind/keys" ;
// Some DNSSEC options // Some DNSSEC options
dnssec-enable yes;
dnssec-validation auto; dnssec-validation auto;
auth-nxdomain no; auth-nxdomain no;