feat: make BIND paths configurable via env vars (RHEL/CentOS support)
默认路径仍为 Debian/Ubuntu 的 /etc/bind/*。通过环境变量可在 RHEL/CentOS (默认 /var/named + /etc/named.conf)上运行: BIND_CONF_DIR, BIND_ZONES_DIR, BIND_CONF_LOCAL, BIND_CONF_OPTIONS, BIND_RNDC_KEY, BIND_SERVICE README 增加 RHEL/CentOS 安装步骤、systemd Environment 示例, 并提示覆盖 BIND_CONF_LOCAL 后必须在 named.conf 里 include。 Motivation: 同一项目在 CentOS 7 上 zone 文件写不到 /var/named, Web 端新增域名后 rndc reload 找不到 zone。
This commit is contained in:
@@ -70,13 +70,15 @@ dns-service/
|
||||
|
||||
## BIND 配置文件
|
||||
|
||||
| 文件 | 用途 | 路径 |
|
||||
|------|------|------|
|
||||
| 文件 | 用途 | 默认路径(Debian/Ubuntu) |
|
||||
|------|------|---------------------------|
|
||||
| `named.conf` | 主配置 | `/etc/bind/named.conf` |
|
||||
| `named.conf.options` | 全局选项(监听端口、转发器、查询权限) | `/etc/bind/named.conf.options` |
|
||||
| `named.conf.local` | Zone 声明(由 Web UI 自动管理) | `/etc/bind/named.conf.local` |
|
||||
| zone files | DNS 记录文件 | `/etc/bind/zones/db.*` |
|
||||
|
||||
> **路径可通过环境变量覆盖**(见下方"路径配置"章节)。RHEL/CentOS/Rocky 默认 BIND 路径为 `/var/named`、`/etc/named.conf`,需要在环境变量里重新指。
|
||||
|
||||
## 安装部署
|
||||
|
||||
### 1. 安装 BIND9
|
||||
@@ -88,6 +90,8 @@ apt-get install -y bind9 bind9utils dnsutils
|
||||
|
||||
### 2. 配置 BIND
|
||||
|
||||
#### Debian/Ubuntu(默认路径)
|
||||
|
||||
```bash
|
||||
# 创建 zone 文件目录
|
||||
mkdir -p /etc/bind/zones
|
||||
@@ -124,6 +128,31 @@ systemctl enable named
|
||||
systemctl start named
|
||||
```
|
||||
|
||||
#### RHEL / CentOS 7 / Rocky Linux
|
||||
|
||||
CentOS 默认 BIND 路径在 `/var/named/` 和 `/etc/named.conf`,需要:
|
||||
|
||||
```bash
|
||||
yum install -y bind bind-utils
|
||||
|
||||
# Zone 文件目录(默认 /var/named 即可;如想用 /etc/bind/zones 也可以,但需同步修改下方环境变量)
|
||||
mkdir -p /var/named
|
||||
chown root:named /var/named
|
||||
chmod 2770 /var/named
|
||||
|
||||
# named.conf(追加 include,让 named 加载 Web UI 写入的 named.conf.local)
|
||||
grep -q 'named.conf.local' /etc/named.conf || \
|
||||
echo 'include "/etc/named.conf.local";' >> /etc/named.conf
|
||||
|
||||
# 给 Web UI 一个空白的入口文件
|
||||
touch /etc/named.conf.local
|
||||
chown root:named /etc/named.conf.local
|
||||
chmod 640 /etc/named.conf.local
|
||||
|
||||
systemctl enable named
|
||||
systemctl start named
|
||||
```
|
||||
|
||||
### 3. 安装 Web 应用
|
||||
|
||||
```bash
|
||||
@@ -169,6 +198,50 @@ systemctl enable dns-web
|
||||
systemctl start dns-web
|
||||
```
|
||||
|
||||
### 5. 路径配置(环境变量)
|
||||
|
||||
BIND 在不同发行版的默认路径不同,下面这些环境变量可以覆盖默认值(不设置则使用 Debian/Ubuntu 默认):
|
||||
|
||||
| 变量 | Debian/Ubuntu 默认 | RHEL/CentOS 推荐值 |
|
||||
|------|--------------------|--------------------|
|
||||
| `BIND_CONF_DIR` | `/etc/bind` | `/etc` |
|
||||
| `BIND_ZONES_DIR` | `/etc/bind/zones` | `/var/named` |
|
||||
| `BIND_CONF_LOCAL` | `/etc/bind/named.conf.local` | `/etc/named.conf.local` |
|
||||
| `BIND_CONF_OPTIONS` | `/etc/bind/named.conf.options` | `/etc/named.conf` |
|
||||
| `BIND_RNDC_KEY` | `/etc/bind/rndc.key` | `/etc/rndc.key` |
|
||||
| `BIND_SERVICE` | `named` | `named` |
|
||||
|
||||
在 systemd 服务里加 `Environment=`:
|
||||
|
||||
```bash
|
||||
cat > /etc/systemd/system/dns-web.service << 'EOF'
|
||||
[Unit]
|
||||
Description=DNS Web Manager
|
||||
After=network.target named.service
|
||||
|
||||
[Service]
|
||||
Type=notify
|
||||
User=root
|
||||
WorkingDirectory=/root/dns-service
|
||||
Environment=BIND_CONF_DIR=/etc
|
||||
Environment=BIND_ZONES_DIR=/var/named
|
||||
Environment=BIND_CONF_LOCAL=/etc/named.conf.local
|
||||
Environment=BIND_CONF_OPTIONS=/etc/named.conf
|
||||
Environment=BIND_RNDC_KEY=/etc/rndc.key
|
||||
ExecStart=/usr/local/bin/gunicorn --workers 2 --bind 0.0.0.0:5300 wsgi:app
|
||||
Restart=always
|
||||
RestartSec=5
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
|
||||
systemctl daemon-reload
|
||||
systemctl restart dns-web
|
||||
```
|
||||
|
||||
> 注意:覆盖 `BIND_CONF_LOCAL` 后,**必须**让 named 主配置 include 这个文件。CentOS 7 的 `/etc/named.conf` 默认不会 include,需要按上面"配置 BIND / RHEL"一节里的命令追加 `include "/etc/named.conf.local";`。
|
||||
|
||||
## 使用说明
|
||||
|
||||
### 登录
|
||||
|
||||
Reference in New Issue
Block a user