]> git.phdru.name Git - ansible.git/commitdiff
Fix(debian/named): Use IP instead of name
authorOleg Broytman <phd@phdru.name>
Sun, 13 Mar 2022 09:28:32 +0000 (12:28 +0300)
committerOleg Broytman <phd@phdru.name>
Sun, 13 Mar 2022 09:28:32 +0000 (12:28 +0300)
In `named` config it's better not to resolve names, even `localhost`.

playbooks/roles/debian/named/templates/named.conf.options

index 37f8735a8a48d8f1f237b39268c8effdb19353d9..8f0cfc767bc35463a4cadb16112abe07408ac592 100644 (file)
@@ -26,6 +26,6 @@ options {
        // listen-on-v6 { any; };
 
        // allow-transfer { trusted; };
-       allow-query { localhost; {{ ansible_facts.default_ipv4.address }}/32; 192.168.0.0/16; 10.0.0.0/8; };
-       allow-recursion { localhost; {{ ansible_facts.default_ipv4.address }}/32; 192.168.0.0/16; 10.0.0.0/8; };
+       allow-query { 127.0.0.1/32; {{ ansible_facts.default_ipv4.address }}/32; 192.168.0.0/16; 10.0.0.0/8; };
+       allow-recursion { 127.0.0.1/32; {{ ansible_facts.default_ipv4.address }}/32; 192.168.0.0/16; 10.0.0.0/8; };
 };