PowerDNS Recursor Role

An Ansible role created by the folks behind PowerDNS to install and configure the PowerDNS Recursor.

This role is considered alpha quality at the moment, issues and pull requests are accepted.

Requirements

An Ansible installation.

Role Variables

pdns_rec_config

A dict detailing the configuration of PowerDNS. You should not set the following options here (other variables set these):

• config-dir
• set-uid
• set-gid

pdns_rec_config_dir

The directory where the configuration (recursor.conf) is stored. '/etc/powerdns' by default.

pdns_rec_installation_type

How to install PowerDNS, either 'packages' or 'source'. 'packages' by default. Source installations are not supported yet.

pdns_rec_repo_provider

When using 'packages' for pdns_rec_installation_type, use operating system packages ('os') or the PowerDNS repository ('PowerDNS'). This is 'os' by default.

pdns_rec_repo_branch

When installing from the PowerDNS repository, what branch should be installed? Currently only 'master' is supported.

pdns_rec_user

The user to run the PowerDNS Recursor as, this is 'pdns' by default on Debian systems and 'pdns-recursor' on CentOS/RHEL. This user is not created.

pdns_rec_group

The group to run the PowerDNS Recursor as, this is 'pdns' by default on Debian systems and 'pdns-recursor' on CentOS/RHEL. This group is not created.

Example Playbook

Bind to 203.0.113.53, port 5300 and allow only traffic from the 198.51.100.0/24 subnet:

- hosts: rec.example.net
  roles:
    - role: PowerDNS.pdns_recursor
  vars:
    pdns_config:
      'allow-from': '198.51.100.0/24'
      'local-address': '203.0.113.53:5300'

Allow from multiple networks:

- hosts: rec.example.net
  roles:
    - role: PowerDNS.pdns_recursor
  vars:
    pdns_config:
      'allow-from':
        - '198.51.100.0/24'
        - '203.0.113.53/24'
      'local-address': '203.0.113.53:5300'

License

GPLv2

Author Information

Pieter Lexis [email protected]