https://github.com/zerwes/ansible-role-win-acrylicdns

ansible role to install and configure acrylic dns
https://github.com/zerwes/ansible-role-win-acrylicdns

acrylic ansible ansible-role dns windows

Last synced: over 1 year ago
JSON representation

ansible role to install and configure acrylic dns

• Host: GitHub
• URL: https://github.com/zerwes/ansible-role-win-acrylicdns
• Owner: zerwes
• License: gpl-3.0
• Created: 2022-02-25T14:50:45.000Z (over 4 years ago)
• Default Branch: main
• Last Pushed: 2023-07-18T11:39:55.000Z (about 3 years ago)
• Last Synced: 2025-01-23T06:46:03.220Z (over 1 year ago)
• Topics: acrylic, ansible, ansible-role, dns, windows
• Language: Jinja
• Homepage:
• Size: 32.2 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
![stand with Ukraine](https://badgen.net/badge/stand%20with/UKRAINE/?color=0057B8&labelColor=FFD700)

[![License: GPL v3](https://img.shields.io/badge/License-GPL%20v3-blue.svg)](http://www.gnu.org/licenses/gpl-3.0)

[![ansible-lint](https://github.com/zerwes/ansible-role-win-acrylicdns/actions/workflows/lint.yml/badge.svg?branch=main)](https://github.com/zerwes/ansible-role-win-acrylicdns/actions/workflows/lint.yml)

# ansible-role-win-acrylicdns

ansible role to install and configure [acrylic dns](https://mayakron.altervista.org/support/acrylic/Home.htm) on windows.

[acrylic dns](https://mayakron.altervista.org/support/acrylic/Home.htm) can be used for a *split view* DNS setup with:

 + partially resolving some internal zomes via VPN

 * preventing DNS leakage of internal DNS names to the upstream public DNS

 * avoid slowdown of general DNS resolution of public resolvable DNS names (for example by routing **all** DNS queries via a VPN) by selectivly routing only the DNS traffic required via VPN etc.

## Role Variables

[defaults/main.yml](defaults/main.yml)

### Example

```yaml

acrylic_dns_proxy_servers:

  PrimaryServer:

    Address: 192.168.0.1  # DNS server reachable via VPN

    DomainNameAffinityMask: "*.my.internal.domain.tld;my.internal.domain.tld"  # domain(s) regex to resolve via VPN

  SecondaryServer:

    Address: 9.9.9.9

  TertiaryServer:

    Address: 1.1.1.1

```