voxpupuli / puppet-unbound

Puppet module for deploying the swiss-army of DNS, Unbound
https://forge.puppet.com/puppet/unbound
Apache License 2.0
28 stars 71 forks source link

Add systemd timer to update root.hints file #332

Closed bastelfreak closed 9 months ago

bastelfreak commented 9 months ago

By default we download a root.hints file once. That's bad. it contains IP-addresses for all root DNS servers. Those addresses can change from time to time. We should update the file every now and then.

Pull Request (PR) description

This Pull Request (PR) fixes the following issues

kenyon commented 9 months ago

I don't run DNS anymore, but when I did, on Debian I'd just use /usr/share/dns/root.hints that is installed by the dns-root-data package.

bastelfreak commented 9 months ago

Also a nice idea, but that seems to be very Debian specific. Unbound also has hints compiled into it that can be used.