You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
40 lines
1.1 KiB
40 lines
1.1 KiB
#!/bin/bash
|
|
# Root NS template
|
|
set -e
|
|
if [ -z $SNSTERGUARD ] ; then exit 1; fi
|
|
DIR=`dirname $0`
|
|
cd `dirname $0`
|
|
|
|
# disable systemd-resolved which conflicts with nsd
|
|
echo "DNSStubListener=no" >> /etc/systemd/resolved.conf
|
|
systemctl stop systemd-resolved
|
|
|
|
apt-get update
|
|
DEBIAN_FRONTEND=noninteractive apt-get install -y unbound dnsutils
|
|
|
|
# get root hints
|
|
#wget "http://www.internic.net/domain/named.root" -O /etc/unbound/root.hints
|
|
echo -e ". 3600000 NS P.ROOT-SERVERS.NET.
|
|
P.ROOT-SERVERS.NET. 3600000 A 100.100.1.10
|
|
P.ROOT-SERVERS.NET. 3600000 AAAA 2001:db8:a001::10
|
|
" > /etc/unbound/root.hints
|
|
|
|
# customize unbound config
|
|
#echo -e "server:
|
|
# ip-address: 127.0.0.1
|
|
echo -e "server:
|
|
root-hints: root.hints
|
|
" > /etc/unbound/unbound.conf.d/root.conf
|
|
|
|
# no DNSSEC validation for now
|
|
sed -i "s/auto/\#auto/" /etc/unbound/unbound.conf.d/root-auto-trust-anchor-file.conf
|
|
|
|
# Be an open dns resolver -- TO CHANGE LATER
|
|
echo -e "server:
|
|
interface: 0.0.0.0
|
|
access-control: 0.0.0.0/0 allow
|
|
cache-max-ttl: 20
|
|
cache-max-negative-ttl: 20
|
|
" > /etc/unbound/unbound.conf.d/listen.conf
|
|
|
|
service unbound restart
|
|
|