grains:

  country: us

  hostusage:

    - DNS

  reboot_safe: yes

  aliases:

    - ns3.infra.opensuse.org

  description: Public DNS server for the opensuse.org domain (not reverse)

  documentation:

    - https://progress.opensuse.org/projects/opensuse-admin-wiki/wiki/DNS

  responsible:

    - lrupp

  partners:

    - prg-ns1.infra.opensuse.org

    - prg-ns2.infra.opensuse.org

    - qsc-ns3.infra.opensuse-org

  weburls: []

roles:

  - nameserver.legacy_secondary

firewalld:

  enabled: true

  zones:

    internal:

      interfaces:

        - private

      services:

        - dns

        - nrpe

    public:

      interfaces:

        - external

      services:

        - dns