Compare commits
4 Commits
ee47958087
...
master
Author | SHA1 | Date | |
---|---|---|---|
ac15172e01 | |||
914ba175da | |||
42cf3b788c | |||
f2beb32041 |
16
README.md
16
README.md
@@ -1,13 +1,15 @@
|
|||||||
## How to deploy :
|
## How to deploy :
|
||||||
|
|
||||||
* Delete all /etc/bind/ directory
|
* Delete all /etc/bind/ directory
|
||||||
* git clone
|
* git clone https://git.virtit.fr/VirtIT/tpl-bind9 /etc/bind
|
||||||
|
* rm -r /etc/bind/.git
|
||||||
* Run ```rndc-confgen | grep '^key "rndc-key" {' -A3 > rndc.key```
|
* Run ```rndc-confgen | grep '^key "rndc-key" {' -A3 > rndc.key```
|
||||||
|
* Run ```mkdir /var/log/named && chown bind: /var/log/named```
|
||||||
* Restart bind service
|
* Restart bind service
|
||||||
|
|
||||||
## How to use :
|
## How to use :
|
||||||
|
|
||||||
This configuration template is for Bind 9.10.3 in Debian 9. You can find the official configuration [here](https://ftp.isc.org/isc/bind9/9.10.3/doc/arm/Bv9ARM.ch06.html)
|
This configuration template is for Bind in Debian. You can find the official configuration [here](https://ftp.isc.org/isc/bind9/)
|
||||||
|
|
||||||
The repository is thought like this:
|
The repository is thought like this:
|
||||||
|
|
||||||
@@ -16,7 +18,7 @@ The repository is thought like this:
|
|||||||
├── named.conf # default file, have only include
|
├── named.conf # default file, have only include
|
||||||
├── named.conf.keys # have all TSIG keys and rndc config
|
├── named.conf.keys # have all TSIG keys and rndc config
|
||||||
├── named.conf.options # have all bind options
|
├── named.conf.options # have all bind options
|
||||||
├── named.conf.view # have all views options
|
├── named.conf.views # have all views options
|
||||||
├── keys # directory with all DNSSEC keys
|
├── keys # directory with all DNSSEC keys
|
||||||
├── views
|
├── views
|
||||||
│ ├── local.conf # have all zones options of the "local" view
|
│ ├── local.conf # have all zones options of the "local" view
|
||||||
@@ -27,16 +29,16 @@ The repository is thought like this:
|
|||||||
|
|
||||||
```
|
```
|
||||||
|
|
||||||
and to add zone, for exemple in local view, you have to add this in the **views/local.conf** file :
|
and to add zone, for example in local view, you have to add this in the **views/local.conf** file :
|
||||||
|
|
||||||
```
|
```
|
||||||
zone "exemple.com" {
|
zone "example.com" {
|
||||||
type master;
|
type master;
|
||||||
file "/etc/bind/zones/local/exemple.com.conf";
|
file "/etc/bind/zones/local/example.com.conf";
|
||||||
};
|
};
|
||||||
```
|
```
|
||||||
|
|
||||||
then add **zones/local/exemple.com.conf** file with all your records like this :
|
then add **zones/local/example.com.conf** file with all your records like this :
|
||||||
|
|
||||||
```
|
```
|
||||||
$ORIGIN example.com.
|
$ORIGIN example.com.
|
||||||
|
@@ -4,7 +4,6 @@ options {
|
|||||||
key-directory "/etc/bind/keys" ;
|
key-directory "/etc/bind/keys" ;
|
||||||
|
|
||||||
// Some DNSSEC options
|
// Some DNSSEC options
|
||||||
dnssec-enable yes;
|
|
||||||
dnssec-validation auto;
|
dnssec-validation auto;
|
||||||
auth-nxdomain no;
|
auth-nxdomain no;
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user