Compare commits

..

No commits in common. "ee03f86b3a39b09c33e7b63dee4761f98669d56a" and "ddb7a1a06a26ac10fa1d8f24bc81eab4f007a8d6" have entirely different histories.

6 changed files with 3 additions and 76 deletions

View File

@ -1,3 +1,3 @@
# role_stubby # role_modele
Rôle de déploiement de stubby. Modèle

View File

@ -1,20 +0,0 @@
---
# defaults file for dnsmasq
stubby_listen_addresses:
- 127.0.0.1
- 0::1
stubby_upstream_recursive_servers:
- address_data: 2a0f:fc80::0
tls_port: 853
tls_auth_name: "dns0.eu"
- address_data: 2a0f:fc81::0
tls_port: 853
tls_auth_name: "dns0.eu"
- address_data: 193.110.81.0
tls_port: 853
tls_auth_name: "dns0.eu"
- address_data: 185.253.5.0
tls_port: 853
tls_auth_name: "dns0.eu"

View File

@ -1,8 +0,0 @@
---
# handlers file for stubby
- name: Redémarrer stubby.service
ansible.builtin.systemd:
state: restarted
name: stubby.service
become: true

View File

@ -1,7 +1,7 @@
galaxy_info: galaxy_info:
namespace: ykn namespace: ykn
author: pulsar89.5 author: pulsar89.5
description: Rôle de déploiement de stubby description: Rôle modèle
license: GPL-3.0-or-later license: GPL-3.0-or-later

View File

@ -1,14 +0,0 @@
---
# tasks file for stubby
- name: Installer stubby
ansible.builtin.apt:
name: stubby
become: true
- name: configurer stubby
ansible.builtin.template:
src: stubby.yml.j2
dest: /etc/stubby/stubby.yml
become: true
notify: Redémarrer stubby.service

View File

@ -1,31 +0,0 @@
# {{ ansible_managed }}
resolution_type: GETDNS_RESOLUTION_STUB
dns_transport_list:
- GETDNS_TRANSPORT_TLS
tls_authentication: GETDNS_AUTHENTICATION_REQUIRED
tls_query_padding_blocksize: 128
edns_client_subnet_private: 1
round_robin_upstreams: 1
idle_timeout: 10000
listen_addresses:
{% for address in stubby_listen_addresses %}
- {{ address }}
{% endfor %}
upstream_recursive_servers:
{% for server in stubby_upstream_recursive_servers %}
- address_data: {{ server.address_data }}
{% if server.tls_port is defined %}
tls_port: {{ server.tls_port }}
{% endif %}
tls_auth_name: "{{ server.tls_auth_name }}"
{% if server.tls_pubkey_pinset is defined %}
tls_pubkey_pinset:
{% for pubkey in server.tls_pubkey_pinset %}
- digest: "{{ pubkey.digest }}"
value: {{ pubkey.value }}
{% endfor %}
{% endif %}
{% endfor %}