CCCHH/ansible-infra
CCCHH/ansible-infra
3
2
Fork 1
Code Issues 18 Pull requests 9 Wiki Activity Actions
ansible-infra/roles/unbound/README.md

1.6 KiB
Raw Blame History

Unbound DNS resolver

Role for a validating, recursive, caching DNS resolver based on Unbound. It is designed to be fast and lean and incorporates modern features based on open standards.

Role Customization

The following variables can be used to customize this role:

  • unbound_install_prometheus_exporter: Boolean of whether Unbound Exporter should also be installed to expose resolver statistics in prometheus format. Defaults to true.
  • unbound_bind_interfaces: List of interface names or IP addresseson which unbound will listen for dns queries. Defaults to [0.0.0.0, ::].
  • unbound_enable_unbound_control: Boolean of whether the remote control feature of unbound should be configured. Defaults to true.
  • unbound_enable_dnssec: Boolean of whether dnssec validation should be enabled. Defaults to true.
  • unbound_access_control: Required List of unbound access control values. Defaults to [].
  • unbound_disable_systemd_networkd: Boolean if true, systemd-networkd is disabled and the local system is pointed towards the configured dns resolver. Defaults to true.
  • unbound_thread_count: The number of threads unbound uses. Defaults to max vCPU Count.