summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPaul Buetow <openbsd@mx.buetow.org>2022-01-16 21:45:54 +0100
committerPaul Buetow <openbsd@mx.buetow.org>2022-01-16 21:45:54 +0100
commit397f3d3241e3f8afb50de4ff9198a7aa10678834 (patch)
treeead784dc6a9fbda54bfaf910e7d79cad2c595fce
parent0691650313aaa0ef05f448b00a964e3593277b51 (diff)
add nsd
-rw-r--r--openbsd/frontends/etc/rc.conf112
-rw-r--r--openbsd/frontends/var/nsd.blowfish/etc/nsd.conf23
-rw-r--r--openbsd/frontends/var/nsd.blowfish/zones/master/snonux.me.zone15
3 files changed, 150 insertions, 0 deletions
diff --git a/openbsd/frontends/etc/rc.conf b/openbsd/frontends/etc/rc.conf
new file mode 100644
index 0000000..66dbc1e
--- /dev/null
+++ b/openbsd/frontends/etc/rc.conf
@@ -0,0 +1,112 @@
+# $OpenBSD: rc.conf,v 1.224 2021/07/16 15:21:41 florian Exp $
+
+# DO NOT EDIT THIS FILE!!
+#
+# This file defines the default service selection as shipped in a
+# release. Upgrades of your system will modify this file.
+#
+# To select the service options you desire, please override these
+# options in the file /etc/rc.conf.local
+#
+# DO NOT EDIT THIS FILE!!
+
+# Set these variables to "NO" to turn the respective service off.
+# Set them to "" to run them with the default flags.
+# Otherwise, these variables override the default flags.
+apmd_flags=NO
+bgpd_flags=NO
+bootparamd_flags=NO
+cron_flags=
+dhcpd_flags=NO
+dhcpleased_flags=
+dhcrelay_flags=NO # for normal use: "-i interface [server]"
+dvmrpd_flags=NO
+eigrpd_flags=NO
+ftpd_flags=NO # set to NO if ftpd is running out of inetd
+ftpproxy_flags=NO
+ftpproxy6_flags=NO
+hostapd_flags=NO
+hotplugd_flags=NO
+httpd_flags=NO
+identd_flags=NO
+ifstated_flags=NO
+iked_flags=NO
+inetd_flags=NO
+isakmpd_flags=NO
+iscsid_flags=NO
+ldapd_flags=NO
+ldattach_flags=NO # for normal use: "[options] linedisc cua-device"
+ldomd_flags=NO
+ldpd_flags=NO
+lpd_flags=NO # for normal use: "" (or "-l" for debugging)
+mopd_flags=NO
+mrouted_flags=NO # be sure to enable multicast below
+npppd_flags=NO
+nsd_flags=NO
+ntpd_flags=
+ospfd_flags=NO
+ospf6d_flags=NO
+pflogd_flags= # add more flags, e.g. "-s 256"
+rad_flags=NO
+radiusd_flags=NO
+rarpd_flags=NO
+rbootd_flags=NO
+relayd_flags=NO
+resolvd_flags=
+ripd_flags=NO
+route6d_flags=NO # be sure to set net.inet6.ip6.forwarding=1
+sasyncd_flags=NO
+sensorsd_flags=NO
+slaacd_flags=
+slowcgi_flags=NO
+smtpd_flags=
+sndiod_flags=
+snmpd_flags=NO
+spamd_flags=NO # also see spamd_black below
+spamlogd_flags= # use eg. "-i interface" and see spamlogd(8)
+sshd_flags=
+switchd_flags=NO
+syslogd_flags= # add more flags, e.g. "-u -a /chroot/dev/log"
+tftpd_flags=NO
+tftpproxy_flags=NO
+unbound_flags=NO
+unwind_flags=NO
+vmd_flags=NO
+watchdogd_flags=NO
+wsmoused_flags=NO # for enabling console mouse support (i386 alpha amd64)
+ # for ps/2 or usb mice: "", serial: "-p /dev/cua00"
+xenodm_flags=NO # on some architectures, you must also
+ # disable console getty in /etc/ttys
+
+# services related to RPC, NFS, and YP
+amd_flags=NO # also see amd_master below
+lockd_flags=NO
+mountd_flags=NO
+nfsd_flags=NO
+portmap_flags=NO # note: inetd(8) rpc services need portmap too
+statd_flags=NO
+ypbind_flags=NO
+ypldap_flags=NO
+ypserv_flags=NO
+
+# set the following to "YES" to turn them on
+pf=YES # Packet filter / NAT
+ipsec=NO # IPsec
+check_quotas=YES # NO may be desirable in some YP environments
+accounting=NO # process accounting (using /var/account/acct)
+
+# Multicast routing configuration
+# Please look at netstart(8) for a detailed description if you change these
+multicast=NO # Reject IPv4 multicast packets by default
+
+# miscellaneous other flags
+amd_master=/etc/amd/master # AMD 'master' map
+library_aslr=YES # set to NO to disable library randomization
+savecore_flags= # "-z" to compress
+spamd_black=NO # set to YES to run spamd without greylisting
+shlib_dirs= # extra directories for ldconfig, separated
+ # by space
+
+# rc.d(8) packages scripts
+# started in the specified order and stopped in reverse order
+pkg_scripts=
diff --git a/openbsd/frontends/var/nsd.blowfish/etc/nsd.conf b/openbsd/frontends/var/nsd.blowfish/etc/nsd.conf
new file mode 100644
index 0000000..9c3e1c3
--- /dev/null
+++ b/openbsd/frontends/var/nsd.blowfish/etc/nsd.conf
@@ -0,0 +1,23 @@
+# $OpenBSD: nsd.conf,v 1.13 2018/08/16 17:59:12 florian Exp $
+
+server:
+ hide-version: yes
+ verbosity: 3
+ database: "" # disable database
+
+remote-control:
+ control-enable: yes
+ control-interface: /var/run/nsd.sock
+
+## tsig key example
+# key:
+# name: "blowfish.buetow.org."
+# algorithm: hmac-sha256
+# secret: "bWVrbWl0YXNkaWdvYXQ="
+
+## master zone example
+zone:
+ name: "snonux.me"
+ zonefile: "master/snonux.me.zone"
+ notify 108.160.134.135 blowfish.buetow.org.
+ provide-xfr 108.160.134.135 blowfish.buetow.org.
diff --git a/openbsd/frontends/var/nsd.blowfish/zones/master/snonux.me.zone b/openbsd/frontends/var/nsd.blowfish/zones/master/snonux.me.zone
new file mode 100644
index 0000000..f13cfd0
--- /dev/null
+++ b/openbsd/frontends/var/nsd.blowfish/zones/master/snonux.me.zone
@@ -0,0 +1,15 @@
+$ORIGIN snonux.me.
+$TTL 4h
+@ IN SOA blowfish.buetow.org. hostmaster.buetow.org. (
+ 2022011605 ; serial
+ 1h ; refresh
+ 30m ; retry
+ 7d ; expire
+ 1h ) ; negative
+ IN NS blowfish.buetow.org.
+ IN NS twofish.buetow.org.
+
+ IN MX 0 buetow.org.
+ IN MX 0 www.buetow.org.
+
+* IN CNAME buetow.org.