mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-08-18 17:55:09 +02:00
Kevin Veen-Birkenbach
2620ee088e
- replaced CERTBOT_DNS_API_TOKEN with CLOUDFLARE_API_TOKEN everywhere - introduced generic sys-dns-cloudflare-records role for managing DNS records - added sys-dns-hetzner-rdns role with both Cloud (hcloud) and Robot API flavors - updated Mailu role to: - generate DKIM before DNS setup - delegate DNS + rDNS records to the new generic roles - removed legacy per-role Cloudflare vars (MAILU_CLOUDFLARE_API_TOKEN) - extended group vars with HOSTING_PROVIDER for rDNS flavor decision - added hetzner.hcloud collection to requirements This consolidates DNS management into reusable roles, supports both Cloudflare and Hetzner providers, and standardizes variable naming across the project.
17 lines
591 B
YAML
17 lines
591 B
YAML
# run_once_srv_web_7_7_dns_records: deactivated
|
|
|
|
- name: Create or update Cloudflare A-record for {{ item }}
|
|
community.general.cloudflare_dns:
|
|
api_token: "{{ CLOUDFLARE_API_TOKEN }}"
|
|
zone: "{{ item.split('.')[-2:] | join('.') }}"
|
|
state: present
|
|
type: A
|
|
name: "{{ item }}"
|
|
content: "{{ cloudflare_target_ip }}"
|
|
ttl: 1
|
|
proxied: "{{ cloudflare_proxied | int }}"
|
|
loop: "{{ cloudflare_domains }}"
|
|
loop_control:
|
|
label: "{{ item }}"
|
|
async: "{{ ASYNC_TIME if ASYNC_ENABLED | bool else omit }}"
|
|
poll: "{{ ASYNC_POLL if ASYNC_ENABLED | bool else omit }}" |