diff options
| author | Kjetil Orbekk <kj@orbekk.com> | 2022-05-21 12:23:57 -0400 |
|---|---|---|
| committer | Kjetil Orbekk <kj@orbekk.com> | 2022-05-21 12:24:09 -0400 |
| commit | 035431a347675aa58e463d29595dac93632898a2 (patch) | |
| tree | fc70405137ef758f37be667500c1a5782e5aa873 /config/dns.nix | |
| parent | a1c04b5f652fff2746b094b0da684c7c12e4d53e (diff) | |
Add he.net dns slaves
Diffstat (limited to 'config/dns.nix')
| -rw-r--r-- | config/dns.nix | 30 |
1 files changed, 18 insertions, 12 deletions
diff --git a/config/dns.nix b/config/dns.nix index 9b32e6d..0741119 100644 --- a/config/dns.nix +++ b/config/dns.nix @@ -28,7 +28,7 @@ in type master; file "/var/run/named/db.${zone}.zone"; auto-dnssec maintain; - inline-signing yes; + inline-signing yes; sig-validity-interval 21 16; key-directory "/opt/secret/bind/${zone}"; update-policy local; @@ -38,42 +38,48 @@ in 193.35.52.61; // trygve transfer 2a00:1b60:1011::6def:e868; // ns1 2001:67c:29f4::61; // ns2 - 2604:2000:12c1:c0c6::1000; // sabaki + 216.218.133.2; // slave.dns.he.net + 2001:470:600::2; // slave.dns.he.net }; also-notify { 193.35.52.61; // trygve transfer 2a00:1b60:1011::6def:e868; // ns1 2001:67c:29f4::61; // ns2 + 216.218.133.2; // slave.dns.he.net + 2001:470:600::2; // slave.dns.he.net }; notify-source-v6 2001:470:8e2e:20::d; - notify explicit; + notify explicit; }; '') masterZones} include "/opt/secret/bind/dynamic.orbekk.com/update/named.conf.key"; zone dynamic.orbekk.com { type master; - file "/var/run/named/db.dynamic.orbekk.com.zone"; - auto-dnssec maintain; - key-directory "/opt/secret/bind/dynamic.orbekk.com"; - allow-query { any; }; + file "/var/run/named/db.dynamic.orbekk.com.zone"; + auto-dnssec maintain; + key-directory "/opt/secret/bind/dynamic.orbekk.com"; + allow-query { any; }; allow-transfer { ::1; 193.35.52.61; // trygve transfer 2a00:1b60:1011::6def:e868; // ns1 2001:67c:29f4::61; // ns2 - 2604:2000:12c1:c0c6::1000; // sabaki + 216.218.133.2; // slave.dns.he.net + 2001:470:600::2; // slave.dns.he.net }; also-notify { 193.35.52.61; // trygve transfer 2a00:1b60:1011::6def:e868; // ns1 2001:67c:29f4::61; // ns2 + 216.218.133.2; // slave.dns.he.net + 2001:470:600::2; // slave.dns.he.net }; notify-source-v6 2001:470:8e2e:20::d; - notify explicit; - update-policy { - grant dynamic.orbekk.com.key zonesub any; - }; + notify explicit; + update-policy { + grant dynamic.orbekk.com.key zonesub any; + }; }; ''; }; |