{"id":19070760,"url":"https://github.com/powerdns/dnsdist-ansible","last_synced_at":"2026-02-23T13:28:10.335Z","repository":{"id":39042617,"uuid":"52274702","full_name":"PowerDNS/dnsdist-ansible","owner":"PowerDNS","description":"An ansible role for dnsdist","archived":false,"fork":false,"pushed_at":"2025-02-03T05:51:10.000Z","size":167,"stargazers_count":31,"open_issues_count":15,"forks_count":34,"subscribers_count":13,"default_branch":"master","last_synced_at":"2025-02-03T06:31:07.303Z","etag":null,"topics":["hacktoberfest"],"latest_commit_sha":null,"homepage":"","language":"Jinja","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/PowerDNS.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-22T13:19:15.000Z","updated_at":"2025-02-03T05:50:09.000Z","dependencies_parsed_at":"2025-02-03T06:36:38.643Z","dependency_job_id":null,"html_url":"https://github.com/PowerDNS/dnsdist-ansible","commit_stats":null,"previous_names":[],"tags_count":10,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PowerDNS%2Fdnsdist-ansible","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PowerDNS%2Fdnsdist-ansible/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PowerDNS%2Fdnsdist-ansible/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PowerDNS%2Fdnsdist-ansible/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/PowerDNS","download_url":"https://codeload.github.com/PowerDNS/dnsdist-ansible/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":240122574,"owners_count":19751142,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["hacktoberfest"],"created_at":"2024-11-09T01:20:26.713Z","updated_at":"2026-02-23T13:28:10.273Z","avatar_url":"https://github.com/PowerDNS.png","language":"Jinja","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Ansible Role: dnsdist\n\n[![Build Status](https://github.com/PowerDNS/dnsdist-ansible/actions/workflows/main.yml/badge.svg)](https://github.com/PowerDNS/dnsdist-ansible)\n[![License](https://img.shields.io/badge/license-MIT%20License-brightgreen.svg)](https://opensource.org/licenses/MIT)\n[![Ansible Role](https://img.shields.io/badge/ansible%20role-PowerDNS.dnsdist-blue.svg)](https://galaxy.ansible.com/PowerDNS/dnsdist)\n[![GitHub tag](https://img.shields.io/github/tag/PowerDNS/dnsdist-ansible.svg)](https://github.com/PowerDNS/dnsdist-ansible/tags)\n\nAn Ansible role create by the folks behind PowerDNS to set up [dnsdist](https://dnsdist.org/).\n\n## Requirements\n\nAn Ansible 2.9 or higher installation.\n\n## Dependencies\n\nNone.\n\n## Role Variables\n\nAvailable variables are listed below, along with default values (see `defaults/main.yml`):\n\n```yaml\ndnsdist_install_repo: \"\"\n```\n\nBy default, dnsdist is installed from the software repositories configured on the target hosts.\n\n```yaml\n# Install dnsdist from the master branch\n- hosts: dnsdist\n  roles:\n  - { role: PowerDNS.dnsdist,\n      dnsdist_install_repo: \"{{ dnsdist_powerdns_repo_master }}\"\n\n# Install dnsdist 1.3.x\n- hosts: dnsdist\n  roles:\n  - { role: PowerDNS.dnsdist,\n      dnsdist_install_repo: \"{{ dnsdist_powerdns_repo_13 }}\"\n```\n\nThe examples above, show how to install DNSdist from the official PowerDNS repositories\n(see the complete list of pre-defined repos in `vars/main.yml`).\n\n```yaml\n- hosts: all\n  vars:\n    dnsdist_install_repo:\n      name: \"dnsdist\" # the repository name\n      apt_repo_origin: \"example.com\"  # used to pin dnsdist to the provided repository\n      apt_repo: \"deb http://example.com/{{ ansible_distribution | lower }} {{ ansible_distribution_release | lower }}/dnsdist main\"\n      gpg_key: \"http://example.com/MYREPOGPGPUBKEY.asc\" # repository public GPG key\n      gpg_key_id: \"MYREPOGPGPUBKEYID\" # to avoid to reimport the key each time the role is executed\n      yum_repo_baseurl: \"http://example.com/centos/$basearch/$releasever/dnsdist\"\n      yum_debug_symbols_repo_baseurl: \"http://example.com/centos/$basearch/$releasever/dnsdist/debug\"\n  roles:\n  - { role: PowerDNS.dnsdist }\n```\n\nIt is also possible to install dnsdist from custom repositories as demonstrated in the example above.\n\n```yaml\ndnsdist_install_epel: True\n```\n\nBy default, install EPEL to satisfy some DNSdist dependencies like `lidsodium`.\nTo skip the installation of EPEL set the `dnsdist_install_epel` variable to `False`.\n\n```yaml\ndnsdist_package_name: \"{{ default_dnsdist_package_name }}\"\n```\n\nThe name of the dnsdist package: \"dnsdist\" on both RHEL and Debian derivates distributions.\n\n```yaml\ndnsdist_package_version: \"\"\n```\n\nOptionally, allow to set a specific version of the dnsdist package to be installed.\n\n```yaml\ndnsdist_install_debug_symbols_package: False\n```\n\nInstall dnsdist debug symbols package.\n\n```yaml\ndnsdist_debug_symbols_package_name: \"{{ default_dnsdist_debug_symbols_package_name }}\"\n```\n\nThe name of the dnsdist debug symbols package to be installed when `dnsdist_install_debug_symbols_package` is `True`.\n\n```yaml\ndnsdist_acls: []\n```\n\nConfigures the dnsdist ACLS (netmasks).\n\n```yaml\ndnsdist_locals: ['127.0.0.1:5300']\n```\n\nConfigure dnsdist's listen addresses.\n\n```yaml\ndnsdist_servers:\n  - '127.0.0.1'\n  - \"{ address='127.0.0.1:5300', source='127.0.0.1@lo', order=1 }\"\n```\n\nThe list of IP addresses of the downstream DNS servers dnsdist should be send traffic to\nOR of Lua tables that the newServer function ( https://dnsdist.org/reference/config.html#newServer ) can parse.\n\n```yaml\ndnsdist_carbonserver: \"\"\n```\n\nThe IP address of the Carbon server that should receive dnsdist metrics.\n\n```yaml\ndnsdist_controlsocket: \"127.0.0.1\"\n```\n\nThe listen IP address of the dnsdist's TCP control socket.\n\n```yaml\ndnsdist_setkey: \"\"\n```\n\nEncryption key for the dnsdist's TCP control socket. If it is empty, a random key will be generated. If a key is already present in the file, it will be kept.\n\n```yaml\ndnsdist_webserver_address: \"\"\n```\n\nThe listen IP address of the built-in webserver, empty thus disable by default.\n\n```yaml\ndnsdist_webserver_password: \"\"\n```\n\nThe authentication credentials for the built-in webserver. Must be set when `dnsdist_webserver_address` is set.\n\n```yaml\ndnsdist_webserver_apikey: \"\"\n```\n\nThe authentication credentials for the built-in API.\n\n```yaml\ndnsdist_webserver_acl: \"\"\n```\n\nSince 1.5.0, only connections from 127.0.0.1 and ::1 are allowed by default. See https://dnsdist.org/guides/webserver.html for more information.\n\n```yaml\ndnsdist_config: \"\"\n```\n\nAdditional dnsdist configuration to be injected verbatim in the `dnsdist.conf` file.\n\n```yaml\ndnsdist_config_owner: 'root'\ndnsdist_config_group: 'root'\n```\n\nUser and Group that own the `dnsdist.conf` file.\n\n```yaml\ndnsdist_service_overrides: {}\n```\n\nDict with overrides for the service (systemd only).\nThis can be used to change any systemd settings in the `[Service]` category.\n\n```yaml\ndnsdist_unit_overrides: {}\n```\n\nDict with overrides for the service unit (systemd only).\nThis can be used to change any systemd settings in the `[Unit]` category.\n\n```yaml\ndnsdist_environment_overrides: {}\n```\n\nDict with overrides for the service environments (systemd only).\nThis can be used to change any environment variables in systemd settings in the `[Service]` category.\n\n```yaml\ndnsdist_service_state: \"started\"\ndnsdist_service_enabled: \"yes\"\n```\n\nAllow to specify the desired state of the DNSdist service.\nE.g. This allows to install and configure DNSdist without automatically starting the service.\n\n```yaml\ndnsdist_disable_handlers: False\n```\n\nDisable automated service restart on configuration changes.\n\n```yaml\ndnsdist_tlslocals: []\n```\nConfigures DNS over TLS listeners. The entries are copied verbatim entry-by-entry.\n\n```yaml\ndnsdist_force_reinstall: False\n```\n\nForce reinstall of dnsdist packages by performing a removal prior to the package installation steps. Intended for usage where a downgrade of dnsdist needs to be performed.\n\n## Example Playbook\n\nDeploy dnsdist in front of Quad9 and enable the web monitoring interface\n\n```yaml\n- hosts: dnsdist\n  roles:\n    - { role: PowerDNS.dnsdist,\n        dnsdist_servers: ['9.9.9.9'],\n        dnsdist_webserver_address: \"{{ ansible_default_ipv4['address'] }}:8083\",\n        dnsdist_webserver_password: 'geheim' }\n```\n\n## Changelog\n\nA detailed changelog of all the changes applied to the role is available [here](./CHANGELOG.md).\n\n## Testing\n\nTests are performed by [Molecule](http://molecule.readthedocs.org/en/latest/).\n\n    $ pip install tox\n\nTo test all the scenarios run\n\n    $ tox\n\nTo run a custom molecule command\n\n    $ tox -e ansible29 -- molecule test -s dnsdist-18\n\n## License\n\nMIT\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpowerdns%2Fdnsdist-ansible","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fpowerdns%2Fdnsdist-ansible","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpowerdns%2Fdnsdist-ansible/lists"}