saltstack.cz

unbound

DNS server.

Instalace balíčku, spuštění a povolení služby.

unbound:
  pkg:
    - installed
  service:
    - running
    - name: unbound
    - enable: True

Balíček s kořenovými certifikáty pro dnssec.

unbound-anchor:
  pkg:
    - installed

Nastavení DNS serveru unbound.

/etc/unbound/unbound.conf.d/unbound.conf:
 file.managed:
  - source: salt://unbound/unbound.conf
  - template: jinja
  - mode: 644
  - user: root
  - group: root
  - watch_in:
      - service: unbound