1
0
forked from infra/ansible
infra/roles/dns_intern/templates/recursor.conf.j2

56 lines
1.4 KiB
Plaintext
Raw Normal View History

# {{ ansible_managed }}
2017-01-07 15:41:21 +01:00
#################################
# allow-from If set, only allow these comma separated netmasks to recurse
2017-01-07 15:41:21 +01:00
#
# allow-from=127.0.0.0/8
2017-01-07 15:41:21 +01:00
#################################
# config-dir Location of configuration directory (recursor.conf)
2017-01-07 15:41:21 +01:00
#
config-dir=/etc/powerdns
2017-01-07 15:41:21 +01:00
2017-01-23 20:09:43 +01:00
#################################
# dnssec DNSSEC mode: off/process-no-validate (default)/process/log-fail/validate
2017-01-23 20:09:43 +01:00
#
# dnssec=process-no-validate
dnssec=off
#################################
# local-address IP addresses to listen on, separated by spaces or commas. Also accepts ports.
#
local-address=127.0.0.1
2017-01-07 15:41:21 +01:00
#################################
# local-port port to listen on
2017-01-07 15:41:21 +01:00
#
local-port=5353
2017-01-07 15:41:21 +01:00
#################################
# query-local-address6 Source IPv6 address for sending queries. IF UNSET, IPv6 WILL NOT BE USED FOR OUTGOING QUERIES
#
{% if global_ipv6 is defined %}
query-local-address6={{ global_ipv6 | ipaddr('address') }}
{% endif %}
2017-01-07 15:41:21 +01:00
#################################
# quiet Suppress logging of questions and answers
2017-01-07 15:41:21 +01:00
#
2018-01-23 18:29:16 +01:00
quiet=yes
#################################
# security-poll-suffix Domain name from which to query security update notifications
2018-01-23 18:29:16 +01:00
#
# security-poll-suffix=secpoll.powerdns.com.
security-poll-suffix=
2017-01-07 15:41:21 +01:00
#################################
# setgid If set, change group id to this gid for more security
2017-01-07 15:41:21 +01:00
#
setgid=pdns
#################################
# setuid If set, change user id to this uid for more security
2017-01-07 15:41:21 +01:00
#
setuid=pdns