Compare commits
4 Commits
ee47958087
...
master
Author | SHA1 | Date | |
---|---|---|---|
ac15172e01 | |||
914ba175da | |||
42cf3b788c | |||
f2beb32041 |
16
README.md
16
README.md
@@ -1,13 +1,15 @@
|
||||
## How to deploy :
|
||||
|
||||
* Delete all /etc/bind/ directory
|
||||
* git clone
|
||||
* git clone https://git.virtit.fr/VirtIT/tpl-bind9 /etc/bind
|
||||
* rm -r /etc/bind/.git
|
||||
* Run ```rndc-confgen | grep '^key "rndc-key" {' -A3 > rndc.key```
|
||||
* Run ```mkdir /var/log/named && chown bind: /var/log/named```
|
||||
* Restart bind service
|
||||
|
||||
## How to use :
|
||||
|
||||
This configuration template is for Bind 9.10.3 in Debian 9. You can find the official configuration [here](https://ftp.isc.org/isc/bind9/9.10.3/doc/arm/Bv9ARM.ch06.html)
|
||||
This configuration template is for Bind in Debian. You can find the official configuration [here](https://ftp.isc.org/isc/bind9/)
|
||||
|
||||
The repository is thought like this:
|
||||
|
||||
@@ -16,7 +18,7 @@ The repository is thought like this:
|
||||
├── named.conf # default file, have only include
|
||||
├── named.conf.keys # have all TSIG keys and rndc config
|
||||
├── named.conf.options # have all bind options
|
||||
├── named.conf.view # have all views options
|
||||
├── named.conf.views # have all views options
|
||||
├── keys # directory with all DNSSEC keys
|
||||
├── views
|
||||
│ ├── local.conf # have all zones options of the "local" view
|
||||
@@ -27,16 +29,16 @@ The repository is thought like this:
|
||||
|
||||
```
|
||||
|
||||
and to add zone, for exemple in local view, you have to add this in the **views/local.conf** file :
|
||||
and to add zone, for example in local view, you have to add this in the **views/local.conf** file :
|
||||
|
||||
```
|
||||
zone "exemple.com" {
|
||||
zone "example.com" {
|
||||
type master;
|
||||
file "/etc/bind/zones/local/exemple.com.conf";
|
||||
file "/etc/bind/zones/local/example.com.conf";
|
||||
};
|
||||
```
|
||||
|
||||
then add **zones/local/exemple.com.conf** file with all your records like this :
|
||||
then add **zones/local/example.com.conf** file with all your records like this :
|
||||
|
||||
```
|
||||
$ORIGIN example.com.
|
||||
|
@@ -4,7 +4,6 @@ options {
|
||||
key-directory "/etc/bind/keys" ;
|
||||
|
||||
// Some DNSSEC options
|
||||
dnssec-enable yes;
|
||||
dnssec-validation auto;
|
||||
auth-nxdomain no;
|
||||
|
||||
|
Reference in New Issue
Block a user