From 4d456f69701c772fd899e752f2372b1c049ed4f0 Mon Sep 17 00:00:00 2001
From: uvok cheetah
Date: Sat, 6 Jul 2024 15:40:37 +0200
Subject: bird: Add strict bind

---
 roles/uvok_bird/defaults/main.yml          | 1 +
 roles/uvok_bird/templates/clearnet.conf.j2 | 3 +++
 2 files changed, 4 insertions(+)

(limited to 'roles')

diff --git a/roles/uvok_bird/defaults/main.yml b/roles/uvok_bird/defaults/main.yml
index 8bf0ef3..1da8043 100644
--- a/roles/uvok_bird/defaults/main.yml
+++ b/roles/uvok_bird/defaults/main.yml
@@ -12,3 +12,4 @@ uvok_bird_opts:
   rpki1: "127.0.0.1"
   rpki2: "127.0.0.2"
   babel_accept_default: false
+  strict_bind: false
diff --git a/roles/uvok_bird/templates/clearnet.conf.j2 b/roles/uvok_bird/templates/clearnet.conf.j2
index 87ae8d8..6962f72 100644
--- a/roles/uvok_bird/templates/clearnet.conf.j2
+++ b/roles/uvok_bird/templates/clearnet.conf.j2
@@ -43,6 +43,9 @@ protocol direct {
 
 template bgp pt_clearnet {
     local as CLEARNET_ASN;
+{% if uvok_bird_opts.strict_bind %}
+    strict bind on;
+{%- endif %}
 
     graceful restart on;
     long lived graceful restart on;
-- 
cgit v1.2.3