<?xml version="1.0" encoding="utf-8"?>
<rougail version="0.10">
  <services>
    <!-- FIXME activer le timer ? -->
    <service name='unbound' target="multi-user">
      <ip ip_type='variable'>unbound_allowed_client</ip>
      <override/>
      <file>/etc/unbound/conf.d/risotto.conf</file>
      <file>/etc/unbound/unbound.conf</file>
      <file engine="none" source="sysuser-unbound.conf">/sysusers.d/0unbound.conf</file>
      <file engine="none" source="tmpfile-unbound.conf">/tmpfiles.d/0unbound.conf</file>
    </service>
    <service name='unbound-anchor'>
      <override/>
    </service>
    <service name='unbound-keygen' disabled="True"/>
  </services>
  <variables>
    <family name="dns" description="DNS">
      <variable name="dns_client_address" redefine="True" disabled="True"/>
      <variable name="ip_dns" redefine="True" remove_fill="True"/>
    </family>
    <family name='dns_resolver' description='Résolveur DNS'>
      <variable name="unbound_allowed_client" type="ip" description="Réseau des clients autorisés à faire des requêtes DNS" multi="True" mandatory="True" provider="dns"/>
      <variable name="unbound_default_forwards" description="Serveur résolveur DNS par défaut" multi="True" mandatory="True"/>
      <family name="forward_zones" description="Serveur DNS faisant autorité sur une zone particulière" leadership="True" hidden="True">
        <variable name="unbound_forward_address" description="Adresse du serveur faisant autorité" provider="authorities" multi="True"/>
        <variable name="unbound_forward_zones" type="domainname" description="Nom de domaine de la zone" multi="True" provider="authority_zones"/>
        <variable name="unbound_forward_reverse_zones" type="domainname" description="Nom de domaine de la zone" multi="True" provider="reverse_authority_zones"/>
      </family>
    </family>
  </variables>
  <constraints>
    <fill name="calc_value">
      <param type="variable">ip_eth0</param>
      <target>ip_dns</target>
    </fill>
  </constraints>
</rougail>