summaryrefslogtreecommitdiff
path: root/config
diff options
context:
space:
mode:
authorKjetil Ørbekk <kj@orbekk.com>2018-04-03 21:49:30 -0400
committerKjetil Ørbekk <kj@orbekk.com>2018-04-03 21:49:30 -0400
commit439bc4e561d3e0cf6e49371f4c7c9e4b8d2650ab (patch)
treea381feae63a1e4e1d37d50a919134e154af6cd68 /config
parent716c38c488eda5137b94235898b0af4f28fe236f (diff)
add dns setup for dynamic.orbekk.com
Diffstat (limited to 'config')
-rw-r--r--config/dns.nix25
1 files changed, 25 insertions, 0 deletions
diff --git a/config/dns.nix b/config/dns.nix
index d4a98af..37c3952 100644
--- a/config/dns.nix
+++ b/config/dns.nix
@@ -37,6 +37,31 @@ in
notify explicit;
};
'') masterZones}
+
+ include "/opt/secret/bind/dynamic.orbekk.com/update/named.conf.key";
+ zone dynamic.orbekk.com {
+ type master;
+ file "/var/run/named/db.dynamic.orbekk.com.zone";
+ auto-dnssec maintain;
+ key-directory "/opt/secret/bind/dynamic.orbekk.com";
+ allow-query { any; };
+ allow-transfer {
+ ::1;
+ 193.35.52.61; // trygve transfer
+ 2a00:1b60:1011::6def:e868; // ns1
+ 2001:67c:29f4::61; // ns2
+ 2604:2000:12c1:c0c6::1000; // sabaki
+ };
+ also-notify {
+ 193.35.52.61; // trygve transfer
+ 2a00:1b60:1011::6def:e868; // ns1
+ 2001:67c:29f4::61; // ns2
+ };
+ notify explicit;
+ update-policy {
+ grant dynamic.orbekk.com.key zonesub any;
+ };
+ };
'';
};