---
deploy_systemd_resolved_config__enable: false

alloy_config_additional: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/auth-dns/alloy/knot-exporter.alloy') }}"

knot__dnssec_key_id: "auth-dns.hamburg.ccc.de-1"
knot__remotes:
  - id: ns-intern.hamburg.ccc.de
    address: [ "2a00:14b0:f000:23::53", "172.31.17.53" ]
  - id: p-dns.irz42.net
    address: [ "192.76.134.30", "2a00:14b0:4200:8600::30" ]
  - id: s-dns.irz42.net
    address: [ "212.12.50.130", "2a00:14b0:4200:3280::130" ]
  - id: k-dns.irz42.net
    address: [ "212.12.54.252", "2a00:14b0:4200:3600::252" ]

knot__catalog_zones:
  - domain: "hamburg.ccc.de.catalog."

knot__zones:
  - domain: "hh.ccc.de."
    catalog_member: "hamburg.ccc.de.catalog."
    notify_targets: [ "ns-intern.hamburg.ccc.de" ]
    content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/auth-dns/zones/hh.ccc.de.zone') }}"

  - domain: "ccchh.net."
    catalog_member: "hamburg.ccc.de.catalog."
    notify_targets: [ "ns-intern.hamburg.ccc.de" ]
    content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/auth-dns/zones/ccchh.net.zone') }}"

  - domain: "hamburg.ccc.de."
    catalog_member: "hamburg.ccc.de.catalog."
    notify_targets: [ "ns-intern.hamburg.ccc.de" ]
    content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/auth-dns/zones/hamburg.ccc.de.zone') }}"

  - domain: "eh20.easterhegg.eu."
    catalog_member: "hamburg.ccc.de.catalog."
    notify_targets: [ "ns-intern.hamburg.ccc.de" ]
    content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/auth-dns/zones/eh20.easterhegg.eu.zone') }}"

  - domain: "eh22.easterhegg.eu."
    catalog_member: "hamburg.ccc.de.catalog."
    notify_targets: [ "ns-intern.hamburg.ccc.de" ]
    content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/auth-dns/zones/eh22.easterhegg.eu.zone') }}"

  - domain: "3.2.0.0.0.0.0.f.0.b.4.1.0.0.a.2.ip6.arpa."
    notify_targets: [ "ns-intern.hamburg.ccc.de", "p-dns.irz42.net", "s-dns.irz42.net", "k-dns.irz42.net" ]
    content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/auth-dns/zones/3.2.0.0.0.0.0.f.0.b.4.1.0.0.a.2.ip6.arpa.zone') }}"