Sys-svc-dns Role

Description: No description available

Variables

• author: Kevin Veen-Birkenbach

• description: Cloudflare DNS bootstrap: parent host A/AAAA (and optional CAA) — runs once per play.

• license: Infinito.Nexus NonCommercial License

• license_url: https://s.infinito.nexus/license

• company: Kevin Veen-Birkenbach

Consulting & Coaching Solutions https://www.veen.world

• min_ansible_version: 2.12

• platforms: [{‘name’: ‘Archlinux’, ‘versions’: [‘rolling’]}]

• galaxy_tags: [‘dns’, ‘cloudflare’, ‘automation’, ‘letsencrypt’, ‘nginx’]

• repository: https://s.infinito.nexus/code

• issue_tracker_url: https://s.infinito.nexus/issues

• documentation: https://docs.infinito.nexus

• logo: {‘class’: ‘fa-solid fa-cloud’}

• run_after: []

README

sys-svc-dns

Bootstrap and maintain DNS prerequisites for your web stack on Cloudflare.

This role validates credentials and (by default) ensures: - A (and optional AAAA) records on the apex (@) for all base SLD domains - Wildcard A/AAAA records (*.parent) for parent hosts via sys-dns-wildcards - (Optional) CAA records for Let’s Encrypt (kept as a commented block you can re-enable)

Runs once per play and is safe to include in stacks that roll out many domains.

---

What it does

1. Validate ``CLOUDFLARE_API_TOKEN`` is present (early fail if missing).

2. Ensure apex A/AAAA exist for every base SLD in SYS_SVC_DNS_BASE_DOMAINS:

   • Writes @  A → networks.internet.ip4

   • Writes @ AAAA → networks.internet.ip6 (only if global and present)

3. (Optional) CAA records for all base SLDs (commented in the tasks; enable if you want CAA managed here).

4. Ensure wildcard parent DNS exists (*.parent derived from children):

   • Delegates to `sys-dns-wildcards <../sys-dns-wildcards/README.md>`__

   • Creates A (and AAAA if enabled) wildcard records on the Cloudflare zone, optionally proxied.

Parent hosts example:

c.wiki.example.com → parent wiki.example.com (plus example.com apex)