add dns setup for dynamic.orbekk.com

1 files changed, 25 insertions, 0 deletions

diff --git a/config/dns.nix b/config/dns.nix
index d4a98af..37c3952 100644
--- a/config/dns.nix
+++ b/config/dns.nix
@@ -37,6 +37,31 @@ in
 	  notify explicit;
         };
       '') masterZones}
+
+      include "/opt/secret/bind/dynamic.orbekk.com/update/named.conf.key";
+      zone dynamic.orbekk.com {
+        type master;
+	file "/var/run/named/db.dynamic.orbekk.com.zone";
+	auto-dnssec maintain;
+	key-directory "/opt/secret/bind/dynamic.orbekk.com";
+	allow-query { any; };
+        allow-transfer {
+          ::1;
+          193.35.52.61;               // trygve transfer
+          2a00:1b60:1011::6def:e868;  // ns1
+          2001:67c:29f4::61;          // ns2
+          2604:2000:12c1:c0c6::1000;  // sabaki
+        };
+        also-notify {
+          193.35.52.61;               // trygve transfer
+          2a00:1b60:1011::6def:e868;  // ns1
+          2001:67c:29f4::61;          // ns2
+        };
+	notify explicit;
+	update-policy {
+	  grant dynamic.orbekk.com.key zonesub any;
+	};
+      };
     '';
   };