dns: validate zone files before apply in knot role

2026-06-10 16:17:18 +02:00 · 2026-06-10 16:17:18 +02:00 · 5973de0959
commit 5973de0959
parent 57d2a94990
1 changed files with 1 additions and 0 deletions
--- a/roles/knot/tasks/02-configure.yaml
+++ b/roles/knot/tasks/02-configure.yaml
@ -33,6 +33,7 @@
    owner: knot
    group: knot
    mode: u=rw,g=r
+    validate: "kzonecheck -v -o '{{ item.domain }}' %s"

 # this seems weird but hear me out:
 # if we don't disable SLAAC, the node automatically gets an address based on IPv6 Router-Advertisements