From 36e5f07f8dda51cc5bb0a105077e751f1c851435 Mon Sep 17 00:00:00 2001
From: Lucas Christian <lucas@lucasec.com>
Date: Thu, 7 Oct 2021 20:41:02 -0700
Subject: T562: Config syntax for defining DNS forward authoritative zones

---
 data/templates/dns-forwarding/recursor.conf.tmpl                 | 3 +++
 data/templates/dns-forwarding/recursor.vyos-hostsd.conf.lua.tmpl | 6 ++++++
 data/templates/dns-forwarding/recursor.zone.conf.tmpl            | 7 +++++++
 3 files changed, 16 insertions(+)
 create mode 100644 data/templates/dns-forwarding/recursor.zone.conf.tmpl

(limited to 'data/templates/dns-forwarding')

diff --git a/data/templates/dns-forwarding/recursor.conf.tmpl b/data/templates/dns-forwarding/recursor.conf.tmpl
index d44f756e8..02efe903b 100644
--- a/data/templates/dns-forwarding/recursor.conf.tmpl
+++ b/data/templates/dns-forwarding/recursor.conf.tmpl
@@ -31,5 +31,8 @@ dnssec={{ dnssec }}
 # serve rfc1918 records
 serve-rfc1918={{ 'no' if no_serve_rfc1918 is defined else 'yes' }}
 
+# zones
+auth-zones={% for z in authoritative_zones %}{{ z.name }}={{ z.file }}{{- "," if not loop.last -}}{% endfor %}
+
 forward-zones-file=recursor.forward-zones.conf
 
diff --git a/data/templates/dns-forwarding/recursor.vyos-hostsd.conf.lua.tmpl b/data/templates/dns-forwarding/recursor.vyos-hostsd.conf.lua.tmpl
index 784d5c360..7f29c387e 100644
--- a/data/templates/dns-forwarding/recursor.vyos-hostsd.conf.lua.tmpl
+++ b/data/templates/dns-forwarding/recursor.vyos-hostsd.conf.lua.tmpl
@@ -22,3 +22,9 @@ addNTA("{{ zone }}", "static")
 {%   endfor %}
 {% endif %}
 
+{% if authoritative_zones is defined %}
+-- from 'service dns forwarding authoritative-domain'
+{%   for zone in authoritative_zones %}
+addNTA("{{ zone }}", "static")
+{%   endfor %}
+{% endif %}
diff --git a/data/templates/dns-forwarding/recursor.zone.conf.tmpl b/data/templates/dns-forwarding/recursor.zone.conf.tmpl
new file mode 100644
index 000000000..758871bef
--- /dev/null
+++ b/data/templates/dns-forwarding/recursor.zone.conf.tmpl
@@ -0,0 +1,7 @@
+;
+; Autogenerated by dns_forwarding.py
+;
+;
+{% for r in records %}
+{{ r.name }}	{{ r.ttl }}	{{ r.type }}	{{ r.value }}
+{% endfor %}
-- 
cgit v1.2.3