nameserver config: add ni as secondary
This commit is contained in:
parent
73a64cc57a
commit
7cd50a3c07
|
@ -60,6 +60,9 @@ in {
|
|||
any: debug
|
||||
|
||||
remote:
|
||||
- id: krebscode_ni
|
||||
address: ${config.krebs.hosts.ni.nets.internet.ip4.addr}
|
||||
key: krebs_transfer_notify_key
|
||||
|
||||
acl:
|
||||
- id: acme_acl
|
||||
|
@ -70,6 +73,10 @@ in {
|
|||
key: dane
|
||||
action: update
|
||||
|
||||
- id: transfer_to_krebscode_secondary
|
||||
key: krebs_transfer_notify_key
|
||||
action: transfer
|
||||
|
||||
mod-rrl:
|
||||
- id: default
|
||||
rate-limit: 200 # Allow 200 resp/s for each flow
|
||||
|
@ -94,6 +101,8 @@ in {
|
|||
file: ${pkgs.krebs.zones."krebsco.de"}
|
||||
dnssec-signing: on
|
||||
dnssec-policy: rsa2k
|
||||
notify: krebscode_ni
|
||||
acl: transfer_to_krebscode_secondary
|
||||
acl: dane_acl
|
||||
|
||||
- domain: _acme-challenge.krebsco.de
|
||||
|
|
|
@ -12,6 +12,7 @@ with lib; {
|
|||
$TTL 60
|
||||
@ 3600 IN SOA spam.krebsco.de. spam.krebsco.de. 0 7200 3600 86400 3600
|
||||
@ 3600 IN NS ns1
|
||||
@ 3600 IN NS ni
|
||||
'';
|
||||
};
|
||||
};
|
||||
|
|
Loading…
Reference in a new issue