mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-14 14:26:04 +02:00
Kevin Veen-Birkenbach
206b3eadbc
Rename filter parent_build_records→wildcard_records; create only wildcard (*.parent) A/AAAA records (no base/apex); switch to CURRENT_PLAY_DOMAINS_ALL; update vars to SYN_DNS_WILDCARD_RECORDS; adjust role/task names, defaults, and docs; add unittest expecting *.a.b from www.a.b.example.com. See: https://chatgpt.com/share/68c35dc1-7170-800f-8fbe-772e61780597
21 lines
1021 B
Markdown
21 lines
1021 B
Markdown
# sys-dns-wildcards
|
|
|
|
Create Cloudflare DNS **wildcard** A/AAAA records (`*.parent`) only for **parent hosts** (hosts that have children).
|
|
The **apex** (SLD.TLD) is considered when computing parents, but **no base host** or `*.apex` record is created by this role.
|
|
|
|
Examples:
|
|
- c.wiki.example.com -> parent: wiki.example.com -> creates: `*.wiki.example.com`
|
|
- a.b.example.com -> parent: b.example.com -> creates: `*.b.example.com`
|
|
- example.com (apex) -> used to detect parents, but **no** `example.com` or `*.example.com` record is created
|
|
|
|
## Inputs
|
|
- parent_dns_domains (list[str], optional): FQDNs to evaluate. If empty, the role flattens CURRENT_PLAY_DOMAINS_ALL.
|
|
- PRIMARY_DOMAIN (apex), defaults_networks.internet.ip4, optional defaults_networks.internet.ip6
|
|
- Flags:
|
|
- parent_dns_enabled (bool, default: true)
|
|
- parent_dns_ipv6_enabled (bool, default: true)
|
|
- parent_dns_proxied (bool, default: false)
|
|
|
|
## Usage
|
|
- Include the role once after your constructor stage has set CURRENT_PLAY_DOMAINS_ALL.
|