ansible-role-bind/molecule/default/converge.yml at master · flora-five/ansible-role-bind · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
---

# Remark that common variables are defined in `group_vars/all.yml`

- name: Converge Primary
  hosts: ns1
  vars:
    bind_zones:
      # Primary server for domain example.com (use zone type autodetection)
      - name: 'example.com'
        primaries:
          - 10.11.0.1
        networks:
          - '192.0.2'
        ipv6_networks:
          - '2001:db9::/48'
        name_servers:
          - ns1.acme-inc.com.
          - ns2.acme-inc.com.
        hostmaster_email: admin
        hosts:
          - name: srv001
            ip: 192.0.2.1
            ipv6: '2001:db9::1'
            aliases:
              - www
          - name: srv002
            ip: 192.0.2.2
            ipv6: '2001:db9::2'
          - name: mail001
            ip: 192.0.2.10
            ipv6: '2001:db9::3'
        mail_servers:
          - name: mail001
            preference: 10
      # Primary server for domain acme-inc.com (specify zone type explicitly)
      - name: 'acme-inc.com'
        type: primary
        primaries:
          - 10.11.0.1
        networks:
          - '10.11'
        ipv6_networks:
          - '2001:db8::/48'
        name_servers:
          - ns1
          - ns2
        hosts:
          - name: ns1
            ip: 10.11.0.1
          - name: ns2
            ip: 10.11.0.2
          - name: srv001
            ip: 10.11.1.1
            ipv6: 2001:db8::1
            aliases:
              - www
          - name: srv002
            ip: 10.11.1.2
            ipv6: 2001:db8::2
            aliases:
              - mysql
          - name: mail001
            ip: 10.11.2.1
            ipv6: 2001:db8::d:1
            aliases:
              - smtp
              - mail-in
          - name: mail002
            ip: 10.11.2.2
            ipv6: 2001:db8::d:2
          - name: mail003
            ip: 10.11.2.3
            ipv6: 2001:db8::d:3
            aliases:
              - imap
              - mail-out
          - name: srv010
            ip: 10.11.0.10
          - name: srv011
            ip: 10.11.0.11
          - name: srv012
            ip: 10.11.0.12
        mail_servers:
          - name: mail001
            preference: 10
          - name: mail002
            preference: 20
        services:
          - name: _ldap._tcp
            weight: 100
            port: 88
            target: srv010
        text:
          - name: _kerberos
            text: KERBEROS.ACME-INC.COM
          - name: '@'
            text:
              - 'some text'
              - 'more text'
  roles:
    - role: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"

- name: Converge Secondary
  hosts: ns2
  vars:
    bind_zones:
      # Secondary server for domain example.com (use zone type autodetection)
      - name: 'example.com'
        primaries:
          - 10.11.0.1
        networks:
          - '192.0.2'
        ipv6_networks:
          - '2001:db9::/48'
      # Secondary server for domain acme-inc.com (specify zone type explicitly)
      - name: 'acme-inc.com'
        type: secondary
        primaries:
          - 10.11.0.1
        networks:
          - '10.11'
        ipv6_networks:
          - '2001:db8::/48'
  roles:
    - role: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"

- name: Converge Forwarder
  hosts: ns3
  vars:
    bind_dnssec_validation: false
    bind_zones:
      # Forwarder for domain example.com (use zone type autodetection)
      - name: 'example.com'
        forwarders:
          - 10.11.0.1
          - 10.11.0.2
        networks:
          - '192.0.2'
        ipv6_networks:
          - '2001:db9::/48'
      # Forwarder server for domain acme-inc.com (specify zone type explicitly)
      - name: 'acme-inc.com'
        type: forward
        forwarders:
          - 10.11.0.1
          - 10.11.0.2
        networks:
          - '10.11'
        ipv6_networks:
          - '2001:db8::/48'
  roles:
    - role: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"