Successfully notifying hurricane electric when DNS updates are pushed.

ansible/roles/public_dns/tasks/freebsd.yaml

@@ -23,6 +23,7 @@
     group: pdns
   loop:
     - /var/lib/powerdns
+    - /var/lib/powerdns/zones
 
 - name: Copy files
   copy:
@@ -37,6 +38,17 @@
     - src: bind.conf
       dest: /usr/local/etc/pdns/
 
+- name: Copy files
+  copy:
+    src: "files/{{ item.src }}"
+    dest: "{{ item.dest }}"
+    mode: 0644
+    owner: pdns
+    group: pdns
+  loop:
+    - src: master.db
+      dest: /var/lib/powerdns/zones/
+
 - name: Initialize DB
   command: "sudo -u pdns sqlite3 -init /usr/local/share/doc/powerdns/schema.sqlite3.sql /var/lib/powerdns/pdns.sqlite3"
   register: initdb
@@ -47,8 +59,6 @@
   when: initdb.changed
   register: initsql
   command: "sudo -u pdns zone2sql zone2sql --gsqlite=yes --named-conf=/usr/local/etc/pdns/bind.conf --transactions=yes"
-  args:
-    stdin: "{{ lookup('file', 'master.db') }}"
 
 - name: Initialize DB
   when: initdb.changed
@@ -103,3 +113,34 @@
 - name: Allow AXFR from the externaldns tsig key
   command: pdnsutil add-meta fizz.buzz TSIG-ALLOW-AXFR externaldns
   when: '"externaldns" not in tsigaxfr.stdout'
+
+- name: Check AXFR-MASTER-TSIG
+  command: pdnsutil get-meta fizz.buzz AXFR-MASTER-TSIG
+  register: signnotify
+  changed_when: false
+  check_mode: no
+
+- name: Sign the notifications
+  command: pdnsutil set-meta fizz.buzz AXFR-MASTER-TSIG secureaxfr
+  when: '"secureaxfr" not in signnotify.stdout'
+
+- name: Check NOTIFY-DNSUPDATE
+  command: pdnsutil get-meta fizz.buzz NOTIFY-DNSUPDATE
+  register: notifydnsupdate
+  changed_when: false
+  check_mode: no
+
+- name: Send out notifications on dns update
+  command: pdnsutil set-meta fizz.buzz NOTIFY-DNSUPDATE 1
+  when: '"1" not in notifydnsupdate.stdout'
+
+- name: Check zone kind
+  command: pdnsutil show-zone fizz.buzz
+  register: showzone
+  changed_when: false
+  check_mode: no
+
+- name: Set to Master to enable pushing updates
+  command: pdnsutil set-kind fizz.buzz primary
+  when: '"Master" not in showzone.stdout'
+