effectivelywild.technitium_dns.technitium_dns_convert_to_nsec3 module – Convert a signed DNS zone from NSEC to NSEC3

Note

This module is part of the effectivelywild.technitium_dns collection (version 1.1.2).

It is not included in ansible-core. To check whether it is installed, run ansible-galaxy collection list.

To install it, use: ansible-galaxy collection install effectivelywild.technitium_dns.

To use it in a playbook, specify: effectivelywild.technitium_dns.technitium_dns_convert_to_nsec3.

New in effectivelywild.technitium_dns 0.1.0

Synopsis

  • Converts a primary DNS zone from NSEC to NSEC3.

  • Only works on zones that are already signed with DNSSEC using NSEC.

Parameters

Parameter

Comments

api_port

integer

Port for the Technitium DNS API. Defaults to 5380

Default: 5380

api_token

string / required

API token for authenticating with the Technitium DNS API

api_url

string / required

Base URL for the Technitium DNS API

node

string

The node domain name for which this API call is intended

When unspecified, the current node is used

This parameter can be used only when Clustering is initialized

validate_certs

boolean

Whether to validate SSL certificates when making API requests.

Choices:

  • false

  • true ← (default)

zone

string / required

The name of the primary zone to convert to NSEC3

See Also

See also

effectivelywild.technitium_dns.technitium_dns_convert_to_nsec

Convert signed zone from NSEC to NSEC3

effectivelywild.technitium_dns.technitium_dns_sign_zone

Sign a zone with DNSSEC

effectivelywild.technitium_dns.technitium_dns_unsign_zone

Unsign a zone with DNSSEC

effectivelywild.technitium_dns.technitium_dns_get_dnssec_properties

Get dnssec properties for a zone

Examples

- name: Convert a primary zone from NSEC to NSEC3
  technitium_dns_convert_to_nsec3:
    api_url: "http://localhost"
    api_token: "myapitoken"
    zone: "example.com"

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key

Description

api_response

dictionary

Complete raw API response from Technitium DNS

Returned: always

response

dictionary

The core data payload from the API (typically empty for conversion operations)

Returned: always

Sample: {}

status

string

API response status

Returned: always

Sample: "ok"

changed

boolean

Whether the module made changes to convert the zone from NSEC to NSEC3

Returned: always

Sample: true

failed

boolean

Whether the module failed to complete the conversion

Returned: always

Sample: false

msg

string

Human-readable message describing the conversion result

Returned: always

Sample: "Zone 'dnssec-demo.test.local' converted from NSEC to NSEC3."

Authors

  • Frank Muise (@effectivelywild)