+include "/etc/bind/pri/dynamic.keys";
+
zone "dynamic.dehnerts.com" IN {
- // secondary is equivalent, starting in bind-9.15.8
- // https://github.com/isc-projects/bind9/commit/79c2400d91b818e66a45494784cea17f46e807f2
- type secondary;
+ type master;
file "/var/lib/bind/dynamic.dehnerts.zone";
- masters { "primary-ns"; };
+ update-policy {
+ grant * selfsub * A TXT;
+ grant xidi.dynamic.dehnerts.com name _acme-challenge.duck-dacha.dynamic.dehnerts.com TXT;
+ grant xidi.dynamic.dehnerts.com name _acme-challenge.homeassistant.dynamic.dehnerts.com TXT;
+ grant xidi.dynamic.dehnerts.com name _acme-challenge.pihole.dynamic.dehnerts.com TXT;
+ grant xidi.dynamic.dehnerts.com name _acme-challenge.unifi.dynamic.dehnerts.com TXT;
+ grant chankillo.dynamic.dehnerts.com name _acme-challenge.mail.dynamic.dehnerts.com TXT;
+ grant chankillo.dynamic.dehnerts.com name _acme-challenge.smtp.dynamic.dehnerts.com TXT;
+ grant chankillo.dynamic.dehnerts.com name _acme-challenge.imap.dynamic.dehnerts.com TXT;
+ grant chankillo.dynamic.dehnerts.com name _acme-challenge.pop.dynamic.dehnerts.com TXT;
+ };
+ allow-transfer { "transfer-allowed"; };
allow-query { any; };
+ also-notify { "secondary-ns"; };
};