Merge pull request #2 from axialmarket/anchor-option

Add a role option to enable/disable the anchor file.
jdauphant · Nov 21, 2017 · f1c247f · f1c247f
2 parents d91281f + 774c74e
commit f1c247f
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/defaults/main.yml b/defaults/main.yml
@@ -1,4 +1,6 @@
 ---
+unbound_anchorfile: "/var/lib/unbound/root.key"
+unbound_anchor_enabled: True
 unbound_logfile: "/var/log/unbound.log"
 unbound_configuration:
     - verbosity: 1

diff --git a/templates/01general.conf.j2 b/templates/01general.conf.j2
@@ -3,7 +3,9 @@
 {% for config in unbound_configuration %}
     {{ config.keys().0 }}: {{ config.values().0 }}
 {% endfor %}
-    auto-trust-anchor-file: "/var/lib/unbound/root.key"
+{% if unbound_anchor_enabled %}
+    auto-trust-anchor-file: "{{unbound_anchorfile}}"
+{% endif %}
 {% for interface in unbound_interfaces %}
     interface: {{interface}}
 {% endfor %}