<?xml version='1.0' encoding='UTF-8'?>
<rougail version="0.10">
  <services>
    <service name="nsd" target="multi-user">
      <override/>
      <ip ip_type="variable">nsd_allowed_all_client</ip>
      <file>/etc/nsd/conf.d/risotto.conf</file>
      <file file_type="variable" source="nsd.zone" variable="nsd_zones_all" included="content">nsd_zone_filenames</file>
      <file file_type="variable" source="nsd.signed" variable="nsd_zone_filenames">nsd_zone_filenames_signed</file>
      <file file_type="variable" source="nsd.reverse" variable="nsd_reverse_reverse_name" included="content">nsd_reverse_filenames</file>
      <file file_type="variable" source="nsd.signed" variable="nsd_reverse_filenames">nsd_reverse_filenames_signed</file>
      <file engine="none" source="sysuser-nsd.conf">/sysusers.d/0nsd.conf</file>
      <file engine="none" source="tmpfile-nsd.conf">/tmpfiles.d/0nsd.conf</file>
    </service>
  </services>
  <variables>
    <family name="dns" description="DNS">
      <variable name="dns_client_address" redefine="True" disabled="True"/>
      <variable name="ip_dns" redefine="True" remove_fill="True">
        <value>127.0.0.1</value>
      </variable>
    </family>
    <family name="dns_server" description="Serveur DNS">
      <variable name="nsd_allowed_client" type="ip" description="Clients" multi="True" mandatory="True" hidden="True" provider="dns"/>
      <variable name="nsd_resolver" type="domainname" description="Nom de domaine du résolveur DNS associé"/>
      <variable name="nsd_resolve_ip" type="ip" hidden="True"/>
      <variable name="nsd_allowed_all_client" type="ip" description="All autorised IP" multi="True" hidden="True"/>
    </family>
    <family name="dns_zone" description="Zone DNS">
      <variable name="nsd_zones" type="domainname" description="Zones DNS" multi="True"/>
      <variable name="nsd_zones_auto" type="domainname" description="Zones DNS automatique" multi="True" hidden="True"/>
      <variable name="nsd_zones_all" type="domainname" description="Toutes les zones DNS" multi="True" hidden="True" mandatory="True"/>
    </family>
    <family name="dns_reverses" description="Zone DNS reverse" leadership="True">
      <variable name="nsd_reverse_network" description="Réseau pour la résolution reverse" type="network_cidr" multi="True"/>
      <variable name="nsd_reverse_reverse_name" description="Nom de la zone" hidden="True"/>
    </family>
    <variable name="nsd_zone_filenames" type="filename" description="Nom des fichiers de zone" multi="True" hidden="True"/>
    <variable name="nsd_zone_filenames_signed" type="filename" description="Nom des fichiers de zone signé" multi="True" hidden="True"/>
    <variable name="nsd_reverse_filenames" type="filename" description="Nom des fichiers de zone reverse" multi="True" hidden="True"/>
    <variable name="nsd_reverse_filenames_signed" type="filename" description="Nom des fichiers de zone reverse signé" multi="True" hidden="True"/>
  </variables>
  <constraints>
    <fill name="nsd_concat_lists">
      <param type="variable">ip_eth</param>
      <param type="variable">nsd_allowed_client</param>
      <param type="variable">nsd_resolve_ip</param>
      <target>nsd_allowed_all_client</target>
    </fill>
    <fill name="set_linked">
      <param name="linked_server" type="variable">nsd_resolver</param>
      <param name="linked_provider">authorities</param>
      <param name="linked_value" type="variable">ip_eth0</param>
      <param name="linked_returns">ip</param>
      <param name="dynamic">0</param>
      <target>nsd_resolve_ip</target>
    </fill>
    <check name="set_linked_configuration">
      <param name="linked_server" type="variable">nsd_resolver</param>
      <param name="leader_provider">authorities</param>
      <param name="leader_value" type="variable">ip_eth0</param>
      <param name="linked_provider">authority_zones</param>
      <target>nsd_zones_all</target>
    </check>
    <check name="set_linked_configuration">
      <param name="linked_server" type="variable">nsd_resolver</param>
      <param name="leader_provider">authorities</param>
      <param name="leader_value" type="variable">ip_eth0</param>
      <param name="linked_provider">authority_zones</param>
      <target>nsd_reverse_reverse_name</target>
    </check>
    <fill name="get_internal_zones">
      <target>nsd_zones_auto</target>
    </fill>
    <fill name="nsd_concat_lists">
      <param type="variable">nsd_zones</param>
      <param type="variable">nsd_zones_auto</param>
      <target>nsd_zones_all</target>
    </fill>
    <fill name="get_reverse_name">
      <param type="variable">nsd_reverse_network</param>
      <target>nsd_reverse_reverse_name</target>
    </fill>
    <fill name="calc_value">
      <param>/etc/nsd/</param>
      <param type="variable">nsd_zones_all</param>
      <param>.zone</param>
      <param name="join"></param>
      <param name="multi" type="boolean">True</param>
      <target>nsd_zone_filenames</target>
    </fill>
    <fill name="calc_value">
      <param type="variable">nsd_zone_filenames</param>
      <param>.signed</param>
      <param name="join"></param>
      <param name="multi" type="boolean">True</param>
      <target>nsd_zone_filenames_signed</target>
    </fill>
    <fill name="calc_value">
      <param>/etc/nsd/</param>
      <param type="variable">nsd_reverse_reverse_name</param>
      <param>reverse</param>
      <param name="join"></param>
      <param name="multi" type="boolean">True</param>
      <target>nsd_reverse_filenames</target>
    </fill>
    <fill name="calc_value">
      <param type="variable">nsd_reverse_filenames</param>
      <param>.signed</param>
      <param name="join"></param>
      <param name="multi" type="boolean">True</param>
      <target>nsd_reverse_filenames_signed</target>
    </fill>
    <fill name="get_zones_info">
      <param>network</param>
      <target>nsd_reverse_network</target>
    </fill>
  </constraints>
</rougail>