kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-09-14 14:26:04 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
a0c2245bbdc68e85d8d06b548cef65e276df8b73
computer-playbook/roles/sys-dns-wildcards/README.md
Kevin Veen-Birkenbach 206b3eadbc refactor(dns): replace sys-dns-parent-hosts with sys-dns-wildcards; emit only *.parent wildcards from CURRENT_PLAY_DOMAINS_ALL 
Rename filter parent_build_records→wildcard_records; create only wildcard (*.parent) A/AAAA records (no base/apex); switch to CURRENT_PLAY_DOMAINS_ALL; update vars to SYN_DNS_WILDCARD_RECORDS; adjust role/task names, defaults, and docs; add unittest expecting *.a.b from www.a.b.example.com. See: https://chatgpt.com/share/68c35dc1-7170-800f-8fbe-772e61780597
2025-09-12 01:40:06 +02:00

1021 B
Raw Blame History

sys-dns-wildcards

Create Cloudflare DNS wildcard A/AAAA records (*.parent) only for parent hosts (hosts that have children). The apex (SLD.TLD) is considered when computing parents, but no base host or *.apex record is created by this role.

Examples:

  • c.wiki.example.com -> parent: wiki.example.com -> creates: *.wiki.example.com
  • a.b.example.com -> parent: b.example.com -> creates: *.b.example.com
  • example.com (apex) -> used to detect parents, but no example.com or *.example.com record is created

Inputs

  • parent_dns_domains (list[str], optional): FQDNs to evaluate. If empty, the role flattens CURRENT_PLAY_DOMAINS_ALL.
  • PRIMARY_DOMAIN (apex), defaults_networks.internet.ip4, optional defaults_networks.internet.ip6
  • Flags:
    • parent_dns_enabled (bool, default: true)
    • parent_dns_ipv6_enabled (bool, default: true)
    • parent_dns_proxied (bool, default: false)

Usage

  • Include the role once after your constructor stage has set CURRENT_PLAY_DOMAINS_ALL.