enable-logging flag can only be true for public zones

2023-07-19 16:01:06 +02:00
parent 94daeab14b
commit bad5748be4
3 changed files with 4 additions and 4 deletions
--- a/modules/dns/variables.tf
+++ b/modules/dns/variables.tf
@@ -78,8 +78,7 @@ variable "recordsets" {
 variable "zone_config" {
  description = "DNS zone configuration."
  type = object({
-    domain         = string
-    enable_logging = optional(bool, false)
+    domain = string
    forwarding = optional(object({
      forwarders      = optional(map(string))
      client_networks = list(string)
@@ -101,6 +100,7 @@ variable "zone_config" {
          { algorithm = "rsasha256", key_length = 1024 }
        )
      }))
+      enable_logging = optional(bool, false)
    }))
    private = optional(object({
      client_networks             = list(string)