added dns using hetzner dns, renamed pubnix => pub

roles/dns/tasks/main.yaml

@@ -1,8 +1,11 @@
 ---
-# FIXME: get rid of hard coded hostnames
-- name: add dns entry
-  shell: |
-    ssh {{ dns.server }} knotc -s {{ dns.socket }} zone-begin {{ dns.zone }}
-    ssh {{ dns.server }} knotc -s {{ dns.socket }} zone-set {{ dns.zone }} shell 300 AAAA {{ server_ipv6 }}
-    ssh {{ dns.server }} knotc -s {{ dns.socket }} zone-set {{ dns.zone }} pubnix 300 AAAA {{ jailip }}
-    ssh {{ dns.server }} knotc -s {{ dns.socket }} zone-commit {{ dns.zone }}
+- name: add dns entry for server
+  community.dns.hetzner_dns_record:
+    state: present
+    zone: "{{ dns.zone }}"
+    record: "{{ name }}.{{ dns.zone }}"
+    type: AAAA
+    ttl: 300
+    value: "{{ server_ipv6 }}"
+    hetzner_token: "{{ hetzner_dns_token }}"
+

roles/pub/files/sshd_config

@@ -1,4 +1,4 @@
-# pubnix sshd config
+# pub jail sshd config
 LogLevel INFO
 LoginGraceTime 1m
 PermitRootLogin no

roles/pub/tasks/main.yaml

@@ -75,7 +75,7 @@
 # create our own group[s]
 - name: Manage groups
   loop: "{{ jailgroups }}"
-  ansible.builtin.script: "bin/group.sh -g {{ item.name }} -a {{ item.state }} -d /usr/local/bastille/jails/pubnix/root"
+  ansible.builtin.script: "bin/group.sh -g {{ item.name }} -a {{ item.state }} -d /usr/local/bastille/jails/{{ role_name }}/root"
 
 # The normal  ansible user  module can't be  used here,  because we're
 # talking  about jail  users  here. I  tried to  patch  the module  to
@@ -89,3 +89,14 @@
   loop: "{{ jailusers }}"
   ansible.builtin.script: "bin/user.sh -u {{ item.name }} -g '{{ item.groups | default(defaults.group) }}' -c {{ role_name }}-user -a {{ item.state }} -d {{ defaults.jailbase }}/{{ role_name }}/root"
 
+- name: add dns entry for jail host
+  community.dns.hetzner_dns_record:
+    state: present
+    zone: "{{ dns.zone }}"
+    record: "{{ role_name }}.{{ dns.zone }}"
+    type: AAAA
+    ttl: 300
+    value: "{{ jailip.stdout }}"
+    hetzner_token: "{{ hetzner_dns_token }}"
+
+

roles/pub/templates/Bastillefile.j2

@@ -1,6 +1,6 @@
 CP etc /
 
-PKG {{ jails.pubnix.pkgs | join(' ') }}
+PKG {{ jails.pub.pkgs | join(' ') }}
 
 SYSRC sshd_enable=YES
 SYSRC sendmail_enable=NONE