undocumented updates.

roles/common/tasks/users.yml

@@ -54,7 +54,7 @@
     name: '{{ item.name }}'
     state: present
     gid: '{{ item.group_id | default(omit) }}'
-  loop: "{{ default_user }}"
+  loop: "{{ extra_user }}"
   loop_control:
     label: '{{ item.name }}'
   when: 
@@ -73,7 +73,7 @@
     shell: '{{ item.shell|d("/bin/bash") }}'
     password: "{{ item.password }}"
     update_password: on_create
-  loop: "{{ default_user }}"
+  loop: "{{ extra_user }}"
   loop_control:
     label: '{{ item.name }}'
   when: extra_user is defined and extra_user|length > 0

roles/common/templates/etc/bind/named.conf.options.j2

@@ -91,6 +91,13 @@ logging {
       print-severity yes;
       print-category no;
    };
+   channel log_zone_transfers {
+      file "/var/log/named/axfr.log" versions 5 size 2m;
+      severity info;
+      print-time yes;
+      print-severity yes;
+      print-category yes;
+   };
    channel dnssec_log {
       file "/var/log/named/dnssec.log" versions 5 size 2m;
       severity debug 3;
@@ -103,6 +110,15 @@ logging {
    };
    category queries {
       queries_log;
+   };
+    category xfer-in {
+      log_zone_transfers;
+   };
+   category xfer-out {
+      log_zone_transfers;
+   };
+   category notify {
+      log_zone_transfers;
    };
    category dnssec {
       dnssec_log;