netbox-plugin-dns 1.2.5__py3-none-any.whl → 1.2.7b2__py3-none-any.whl

netbox_dns/forms/zone.py

@@ -36,10 +36,11 @@ from netbox_dns.models import (
     Registrar,
     RegistrationContact,
     ZoneTemplate,
+    DNSSECPolicy,
 )
 from netbox_dns.choices import ZoneStatusChoices
 from netbox_dns.utilities import name_to_unicode, network_to_reverse
-from netbox_dns.fields import RFC2317NetworkFormField
+from netbox_dns.fields import RFC2317NetworkFormField, TimePeriodField
 from netbox_dns.validators import validate_ipv4, validate_prefix, validate_rfc2317
 
 
@@ -171,7 +172,7 @@ class ZoneForm(ZoneTemplateUpdateMixin, TenancyForm, NetBoxModelForm):
         label=_("Nameservers"),
         quick_add=QUICK_ADD,
     )
-    default_ttl = forms.IntegerField(
+    default_ttl = TimePeriodField(
         required=False,
         help_text=_("Default TTL for new records in this zone"),
         validators=[MinValueValidator(1)],
@@ -181,7 +182,7 @@ class ZoneForm(ZoneTemplateUpdateMixin, TenancyForm, NetBoxModelForm):
         required=False,
         label=_("Description"),
     )
-    soa_ttl = forms.IntegerField(
+    soa_ttl = TimePeriodField(
         required=True,
         help_text=_("TTL for the SOA record of the zone"),
         validators=[MinValueValidator(1)],
@@ -199,25 +200,25 @@ class ZoneForm(ZoneTemplateUpdateMixin, TenancyForm, NetBoxModelForm):
         help_text=_("Mailbox of the zone's administrator"),
         label=_("SOA RName"),
     )
-    soa_refresh = forms.IntegerField(
+    soa_refresh = TimePeriodField(
         required=True,
         help_text=_("Refresh interval for secondary nameservers"),
         validators=[MinValueValidator(1)],
         label=_("SOA Refresh"),
     )
-    soa_retry = forms.IntegerField(
+    soa_retry = TimePeriodField(
         required=True,
         help_text=_("Retry interval for secondary nameservers"),
         validators=[MinValueValidator(1)],
         label=_("SOA Retry"),
     )
-    soa_expire = forms.IntegerField(
+    soa_expire = TimePeriodField(
         required=True,
         validators=[MinValueValidator(1)],
         help_text=_("Expire time after which the zone is considered unavailable"),
         label=_("SOA Expire"),
     )
-    soa_minimum = forms.IntegerField(
+    soa_minimum = TimePeriodField(
         required=True,
         help_text=_("Minimum TTL for negative results, e.g. NXRRSET, NXDOMAIN"),
         validators=[MinValueValidator(1)],
@@ -243,7 +244,7 @@ class ZoneForm(ZoneTemplateUpdateMixin, TenancyForm, NetBoxModelForm):
     rfc2317_parent_managed = forms.BooleanField(
         required=False,
         help_text=_(
-            "IPv4 reverse zone for deletgating the RFC2317 PTR records is managed in NetBox DNS"
+            "IPv4 reverse zone for delegating the RFC2317 PTR records is managed in NetBox DNS"
         ),
         label=_("RFC2317 Parent Managed"),
     )
@@ -271,6 +272,11 @@ class ZoneForm(ZoneTemplateUpdateMixin, TenancyForm, NetBoxModelForm):
             "soa_serial",
             name=_("SOA"),
         ),
+        FieldSet(
+            "dnssec_policy",
+            "inline_signing",
+            name=_("DNSSEC"),
+        ),
         FieldSet(
             "rfc2317_prefix",
             "rfc2317_parent_managed",
@@ -369,6 +375,8 @@ class ZoneForm(ZoneTemplateUpdateMixin, TenancyForm, NetBoxModelForm):
             "soa_minimum",
             "rfc2317_prefix",
             "rfc2317_parent_managed",
+            "dnssec_policy",
+            "inline_signing",
             "registrar",
             "registry_domain_id",
             "registrant",
@@ -403,6 +411,11 @@ class ZoneFilterForm(TenancyFilterForm, NetBoxModelFilterSetForm):
             "soa_serial_auto",
             name=_("SOA"),
         ),
+        FieldSet(
+            "dnssec_policy",
+            "inline_signing",
+            name=_("DNSSEC"),
+        ),
         FieldSet(
             "rfc2317_prefix",
             "rfc2317_parent_managed",
@@ -482,6 +495,11 @@ class ZoneFilterForm(TenancyFilterForm, NetBoxModelFilterSetForm):
         required=False,
         label=_("Registrar"),
     )
+    dnssec_policy_id = DynamicModelMultipleChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        label=_("DNSSEC Policy"),
+    )
     registry_domain_id = forms.CharField(
         required=False,
         label=_("Registry Domain ID"),
@@ -530,11 +548,11 @@ class ZoneImportForm(ZoneTemplateUpdateMixin, NetBoxModelImportForm):
         required=False,
         label=_("Nameservers"),
     )
-    default_ttl = forms.IntegerField(
+    default_ttl = TimePeriodField(
         required=False,
         label=_("Default TTL"),
     )
-    soa_ttl = forms.IntegerField(
+    soa_ttl = TimePeriodField(
         required=False,
         help_text=_("TTL for the SOA record of the zone"),
         label=_("SOA TTL"),
@@ -562,22 +580,22 @@ class ZoneImportForm(ZoneTemplateUpdateMixin, NetBoxModelImportForm):
         required=False,
         label=_("SOA Serial"),
     )
-    soa_refresh = forms.IntegerField(
+    soa_refresh = TimePeriodField(
         required=False,
         help_text=_("Refresh interval for secondary nameservers"),
         label=_("SOA Refresh"),
     )
-    soa_retry = forms.IntegerField(
+    soa_retry = TimePeriodField(
         required=False,
         help_text=_("Retry interval for secondary nameservers"),
         label=_("SOA Retry"),
     )
-    soa_expire = forms.IntegerField(
+    soa_expire = TimePeriodField(
         required=False,
         help_text=_("Expire time after which the zone is considered unavailable"),
         label=_("SOA Expire"),
     )
-    soa_minimum = forms.IntegerField(
+    soa_minimum = TimePeriodField(
         required=False,
         help_text=_("Minimum TTL for negative results, e.g. NXRRSET, NXDOMAIN"),
         label=_("SOA Minimum TTL"),
@@ -590,10 +608,23 @@ class ZoneImportForm(ZoneTemplateUpdateMixin, NetBoxModelImportForm):
     rfc2317_parent_managed = forms.BooleanField(
         required=False,
         help_text=_(
-            "IPv4 reverse zone for deletgating the RFC2317 PTR records is managed in NetBox DNS"
+            "IPv4 reverse zone for delegating the RFC2317 PTR records is managed in NetBox DNS"
         ),
         label=_("RFC2317 Parent Managed"),
     )
+    dnssec_policy = CSVModelChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        to_field_name="name",
+        error_messages={
+            "invalid_choice": _("DNSSEC policy %(value)s not found"),
+        },
+        label=_("DNSSEC Policy"),
+    )
+    inline_signing = forms.BooleanField(
+        required=False,
+        label=_("Use Inline Signing"),
+    )
     registrar = CSVModelChoiceField(
         queryset=Registrar.objects.all(),
         required=False,
@@ -676,6 +707,8 @@ class ZoneImportForm(ZoneTemplateUpdateMixin, NetBoxModelImportForm):
             "soa_retry",
             "soa_expire",
             "soa_minimum",
+            "dnssec_policy",
+            "inline_signing",
             "rfc2317_prefix",
             "rfc2317_parent_managed",
             "registrar",
@@ -726,7 +759,7 @@ class ZoneBulkEditForm(NetBoxModelBulkEditForm):
         required=False,
         label=_("Nameservers"),
     )
-    default_ttl = forms.IntegerField(
+    default_ttl = TimePeriodField(
         required=False,
         validators=[MinValueValidator(1)],
         label=_("Default TTL"),
@@ -736,7 +769,7 @@ class ZoneBulkEditForm(NetBoxModelBulkEditForm):
         required=False,
         label=_("Description"),
     )
-    soa_ttl = forms.IntegerField(
+    soa_ttl = TimePeriodField(
         required=False,
         validators=[MinValueValidator(1)],
         label=_("SOA TTL"),
@@ -760,22 +793,22 @@ class ZoneBulkEditForm(NetBoxModelBulkEditForm):
         validators=[MinValueValidator(1), MaxValueValidator(4294967295)],
         label=_("SOA Serial"),
     )
-    soa_refresh = forms.IntegerField(
+    soa_refresh = TimePeriodField(
         required=False,
         validators=[MinValueValidator(1)],
         label=_("SOA Refresh"),
     )
-    soa_retry = forms.IntegerField(
+    soa_retry = TimePeriodField(
         required=False,
         validators=[MinValueValidator(1)],
         label=_("SOA Retry"),
     )
-    soa_expire = forms.IntegerField(
+    soa_expire = TimePeriodField(
         required=False,
         validators=[MinValueValidator(1)],
         label=_("SOA Expire"),
     )
-    soa_minimum = forms.IntegerField(
+    soa_minimum = TimePeriodField(
         required=False,
         validators=[MinValueValidator(1)],
         label=_("SOA Minimum TTL"),
@@ -790,10 +823,20 @@ class ZoneBulkEditForm(NetBoxModelBulkEditForm):
         required=False,
         widget=BulkEditNullBooleanSelect(),
         help_text=_(
-            "IPv4 reverse zone for deletgating the RFC2317 PTR records is managed in NetBox DNS"
+            "IPv4 reverse zone for delegating the RFC2317 PTR records is managed in NetBox DNS"
         ),
         label=_("RFC2317 Parent Managed"),
     )
+    dnssec_policy = DynamicModelChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        label=_("DNSSEC Policy"),
+    )
+    inline_signing = forms.NullBooleanField(
+        required=False,
+        widget=BulkEditNullBooleanSelect(),
+        label=_("Use Inline Signing"),
+    )
     registrar = DynamicModelChoiceField(
         queryset=Registrar.objects.all(),
         required=False,
@@ -857,6 +900,11 @@ class ZoneBulkEditForm(NetBoxModelBulkEditForm):
             "soa_serial",
             name=_("SOA"),
         ),
+        FieldSet(
+            "dnssec_policy",
+            "inline_signing",
+            name=_("DNSSEC"),
+        ),
         FieldSet(
             "rfc2317_prefix",
             "rfc2317_parent_managed",

netbox_dns/forms/zone_template.py

@@ -27,6 +27,7 @@ from netbox_dns.models import (
     NameServer,
     Registrar,
     RegistrationContact,
+    DNSSECPolicy,
 )
 
 
@@ -62,6 +63,7 @@ class ZoneTemplateForm(TenancyForm, NetBoxModelForm):
         FieldSet("name", "description", "nameservers", name=_("Zone Template")),
         FieldSet("soa_mname", "soa_rname", name=_("SOA")),
         FieldSet("record_templates", name=_("Record Templates")),
+        FieldSet("dnssec_policy", name=_("DNSSEC")),
         FieldSet(
             "registrar",
             "registrant",
@@ -82,6 +84,7 @@ class ZoneTemplateForm(TenancyForm, NetBoxModelForm):
             "nameservers",
             "soa_mname",
             "soa_rname",
+            "dnssec_policy",
             "record_templates",
             "description",
             "registrar",
@@ -105,6 +108,7 @@ class ZoneTemplateFilterForm(TenancyFilterForm, NetBoxModelFilterSetForm):
         FieldSet("name", "nameserver_id", "description", name=_("Attributes")),
         FieldSet("soa_mname_id", "soa_rname", name=_("SOA")),
         FieldSet("record_template_id", name=_("Record Templates")),
+        FieldSet("dnssec_policy", name=_("DNSSEC")),
         FieldSet(
             "registrar_id",
             "registrant_id",
@@ -142,6 +146,11 @@ class ZoneTemplateFilterForm(TenancyFilterForm, NetBoxModelFilterSetForm):
     description = forms.CharField(
         required=False,
     )
+    dnssec_policy_id = DynamicModelMultipleChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        label=_("DNSSEC Policy ID"),
+    )
     registrar_id = DynamicModelMultipleChoiceField(
         queryset=Registrar.objects.all(),
         required=False,
@@ -189,6 +198,15 @@ class ZoneTemplateImportForm(NetBoxModelImportForm):
         required=False,
         label=_("Record Templates"),
     )
+    dnssec_policy = CSVModelChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        to_field_name="name",
+        error_messages={
+            "invalid_choice": _("DNSSEC policy %(value)s not found"),
+        },
+        label=_("DNSSEC Policy"),
+    )
     registrar = CSVModelChoiceField(
         queryset=Registrar.objects.all(),
         required=False,
@@ -250,6 +268,7 @@ class ZoneTemplateImportForm(NetBoxModelImportForm):
             "soa_mname",
             "soa_rname",
             "record_templates",
+            "dnssec_policy",
             "description",
             "registrar",
             "registrant",
@@ -281,6 +300,11 @@ class ZoneTemplateBulkEditForm(NetBoxModelBulkEditForm):
     description = forms.CharField(
         max_length=200, required=False, label=_("Description")
     )
+    dnssec_policy = DynamicModelChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        label=_("DNSSEC Policy"),
+    )
     registrar = DynamicModelChoiceField(
         queryset=Registrar.objects.all(),
         required=False,
@@ -334,6 +358,10 @@ class ZoneTemplateBulkEditForm(NetBoxModelBulkEditForm):
             "record_templates",
             name=_("Record Templates"),
         ),
+        FieldSet(
+            "dnssec_policy",
+            name=_("DNSSEC"),
+        ),
         FieldSet(
             "registrar",
             "registrant",
@@ -351,6 +379,7 @@ class ZoneTemplateBulkEditForm(NetBoxModelBulkEditForm):
         "soa_mname",
         "soa_rname",
         "record_templates",
+        "dnssec_policy",
         "registrar",
         "registrant",
         "admin_c",

netbox_dns/graphql/__init__.py

@@ -1,10 +1,12 @@
 from .schema import (
-    NetBoxDNSViewQuery,
     NetBoxDNSNameServerQuery,
-    NetBoxDNSRegistrationContactQuery,
-    NetBoxDNSRegistrarQuery,
+    NetBoxDNSViewQuery,
     NetBoxDNSZoneQuery,
     NetBoxDNSRecordQuery,
+    NetBoxDNSDNSSECKeyTemplateQuery,
+    NetBoxDNSDNSSECPolicyQuery,
+    NetBoxDNSRegistrationContactQuery,
+    NetBoxDNSRegistrarQuery,
     NetBoxDNSZoneTemplateQuery,
     NetBoxDNSRecordTemplateQuery,
 )
@@ -14,6 +16,8 @@ schema = [
     NetBoxDNSViewQuery,
     NetBoxDNSZoneQuery,
     NetBoxDNSRecordQuery,
+    NetBoxDNSDNSSECKeyTemplateQuery,
+    NetBoxDNSDNSSECPolicyQuery,
     NetBoxDNSRegistrationContactQuery,
     NetBoxDNSRegistrarQuery,
     NetBoxDNSZoneTemplateQuery,

netbox_dns/graphql/filters.py

@@ -7,6 +7,8 @@ from netbox_dns.models import (
     View,
     Zone,
     Record,
+    DNSSECKeyTemplate,
+    DNSSECPolicy,
     RegistrationContact,
     Registrar,
     ZoneTemplate,
@@ -17,6 +19,8 @@ from netbox_dns.filtersets import (
     ViewFilterSet,
     ZoneFilterSet,
     RecordFilterSet,
+    DNSSECKeyTemplateFilterSet,
+    DNSSECPolicyFilterSet,
     RegistrationContactFilterSet,
     RegistrarFilterSet,
     ZoneTemplateFilterSet,
@@ -48,6 +52,18 @@ class NetBoxDNSRecordFilter(BaseFilterMixin):
     ip_address: str | None
 
 
+@strawberry_django.filter(DNSSECKeyTemplate, lookups=True)
+@autotype_decorator(DNSSECKeyTemplateFilterSet)
+class NetBoxDNSDNSSECKeyTemplateFilter(BaseFilterMixin):
+    ip_address: str | None
+
+
+@strawberry_django.filter(DNSSECPolicy, lookups=True)
+@autotype_decorator(DNSSECPolicyFilterSet)
+class NetBoxDNSDNSSECPolicyFilter(BaseFilterMixin):
+    ip_address: str | None
+
+
 @strawberry_django.filter(ZoneTemplate, lookups=True)
 @autotype_decorator(ZoneTemplateFilterSet)
 class NetBoxDNSZoneTemplateFilter(BaseFilterMixin):

netbox_dns/graphql/schema.py

@@ -8,6 +8,8 @@ from .types import (
     NetBoxDNSViewType,
     NetBoxDNSZoneType,
     NetBoxDNSRecordType,
+    NetBoxDNSDNSSECKeyTemplateType,
+    NetBoxDNSDNSSECPolicyType,
     NetBoxDNSRegistrationContactType,
     NetBoxDNSRegistrarType,
     NetBoxDNSZoneTemplateType,
@@ -41,6 +43,24 @@ class NetBoxDNSRecordQuery:
     netbox_dns_record_list: List[NetBoxDNSRecordType] = strawberry_django.field()
 
 
+@strawberry.type(name="Query")
+class NetBoxDNSDNSSECKeyTemplateQuery:
+    netbox_dns_dnssec_key_template: NetBoxDNSDNSSECKeyTemplateType = (
+        strawberry_django.field()
+    )
+    netbox_dns_dnssec_key_template_list: List[NetBoxDNSDNSSECKeyTemplateType] = (
+        strawberry_django.field()
+    )
+
+
+@strawberry.type(name="Query")
+class NetBoxDNSDNSSECPolicyQuery:
+    netbox_dns_dnssec_policy: NetBoxDNSDNSSECPolicyType = strawberry_django.field()
+    netbox_dns_dnssec_policy_list: List[NetBoxDNSDNSSECPolicyType] = (
+        strawberry_django.field()
+    )
+
+
 @strawberry.type(name="Query")
 class NetBoxDNSRegistrationContactQuery:
     netbox_dns_registration_contact: NetBoxDNSRegistrationContactType = (

netbox_dns/graphql/types.py

@@ -13,6 +13,8 @@ from netbox_dns.models import (
     View,
     Zone,
     Record,
+    DNSSECKeyTemplate,
+    DNSSECPolicy,
     RegistrationContact,
     Registrar,
     ZoneTemplate,
@@ -23,6 +25,8 @@ from .filters import (
     NetBoxDNSViewFilter,
     NetBoxDNSZoneFilter,
     NetBoxDNSRecordFilter,
+    NetBoxDNSDNSSECKeyTemplateFilter,
+    NetBoxDNSDNSSECPolicyFilter,
     NetBoxDNSRegistrationContactFilter,
     NetBoxDNSRegistrarFilter,
     NetBoxDNSZoneTemplateFilter,
@@ -58,6 +62,7 @@ class NetBoxDNSViewType(NetBoxObjectType):
 @strawberry_django.type(Zone, fields="__all__", filters=NetBoxDNSZoneFilter)
 class NetBoxDNSZoneType(NetBoxObjectType):
     name: str
+    description: str | None
     status: str
     active: bool
     view: Annotated["NetBoxDNSViewType", strawberry.lazy("netbox_dns.graphql.types")]
@@ -78,9 +83,13 @@ class NetBoxDNSZoneType(NetBoxObjectType):
     soa_expire: BigInt
     soa_minimum: BigInt
     soa_serial_auto: bool
-    description: str | None
-    arpa_network: str | None
-    tenant: Annotated["TenantType", strawberry.lazy("tenancy.graphql.types")] | None
+    dnssec_policy: (
+        Annotated[
+            "NetBoxDNSDNSSECPolicyType", strawberry.lazy("netbox_dns.graphql.types")
+        ]
+        | None
+    )
+    inline_signing: bool
     registrar: (
         Annotated["NetBoxDNSRegistrarType", strawberry.lazy("netbox_dns.graphql.types")]
         | None
@@ -126,6 +135,8 @@ class NetBoxDNSZoneType(NetBoxObjectType):
     rfc2317_child_zones: List[
         Annotated["NetBoxDNSRecordType", strawberry.lazy("netbox_dns.graphql.types")]
     ]
+    arpa_network: str | None
+    tenant: Annotated["TenantType", strawberry.lazy("tenancy.graphql.types")] | None
 
 
 @strawberry_django.type(Record, fields="__all__", filters=NetBoxDNSRecordFilter)
@@ -162,6 +173,53 @@ class NetBoxDNSRecordType(NetBoxObjectType):
     ]
 
 
+@strawberry_django.type(
+    DNSSECKeyTemplate, fields="__all__", filters=NetBoxDNSDNSSECKeyTemplateFilter
+)
+class NetBoxDNSDNSSECKeyTemplateType(NetBoxObjectType):
+    name: str
+    description: str
+    tenant: Annotated["TenantType", strawberry.lazy("tenancy.graphql.types")] | None
+    type: str
+    lifetime: BigInt | None
+    algorithm: str
+    key_size: BigInt | None
+
+
+@strawberry_django.type(
+    DNSSECPolicy, fields="__all__", filters=NetBoxDNSDNSSECPolicyFilter
+)
+class NetBoxDNSDNSSECPolicyType(NetBoxObjectType):
+    name: str
+    description: str | None
+    status: str
+    tenant: Annotated["TenantType", strawberry.lazy("tenancy.graphql.types")] | None
+    key_templates: List[
+        Annotated[
+            "NetBoxDNSDNSSECKeyTemplateType",
+            strawberry.lazy("netbox_dns.graphql.types"),
+        ]
+    ]
+    dnskey_ttl: BigInt | None
+    purge_keys: BigInt | None
+    publish_safety: BigInt | None
+    retire_safety: BigInt | None
+    signatures_jitter: BigInt | None
+    signatures_refresh: BigInt | None
+    signatures_validity: BigInt | None
+    signatures_validity_dnskey: BigInt | None
+    max_zone_ttl: BigInt | None
+    zone_propagation_delay: BigInt | None
+    create_cdnskey: bool
+    cds_digest_types: List[str]
+    parent_ds_ttl: BigInt | None
+    parent_propagation_delay: BigInt | None
+    use_nsec3: bool
+    nsec3_iterations: BigInt | None
+    nsec3_opt_out: bool
+    nsec3_salt_size: BigInt | None
+
+
 @strawberry_django.type(
     RegistrationContact, fields="__all__", filters=NetBoxDNSRegistrationContactFilter
 )
@@ -226,6 +284,12 @@ class NetBoxDNSZoneTemplateType(NetBoxObjectType):
         | None
     )
     soa_rname: str | None
+    dnssec_policy: (
+        Annotated[
+            "NetBoxDNSDNSSECPolicyType", strawberry.lazy("netbox_dns.graphql.types")
+        ]
+        | None
+    )
     record_templates: List[
         Annotated[
             "NetBoxDNSRecordTemplateType", strawberry.lazy("netbox_dns.graphql.types")