chankillo dyndns setup

[sysconfig/bind.git] / named.conf.chankillo

diff --git a/named.conf.chankillo b/named.conf.chankillo
index eb9e510cb8ebf98bb66519e396bf7db4bd2eb1c2..0786a25e76406405f64cab10d9649464afdaa115 100644 (file)
--- a/named.conf.chankillo
+++ b/named.conf.chankillo
@@ -1,8 +1,20 @@
+include "/etc/bind/pri/dynamic.keys";
+
 zone "dynamic.dehnerts.com" IN {
-       // secondary is equivalent, starting in bind-9.15.8
-       // https://github.com/isc-projects/bind9/commit/79c2400d91b818e66a45494784cea17f46e807f2
-       type secondary;
+       type master;
        file "/var/lib/bind/dynamic.dehnerts.zone";
-       masters { "primary-ns"; };
+       update-policy {
+            grant * selfsub * A TXT;
+            grant xidi.dynamic.dehnerts.com name _acme-challenge.duck-dacha.dynamic.dehnerts.com TXT;
+            grant xidi.dynamic.dehnerts.com name _acme-challenge.homeassistant.dynamic.dehnerts.com TXT;
+            grant xidi.dynamic.dehnerts.com name _acme-challenge.pihole.dynamic.dehnerts.com TXT;
+            grant xidi.dynamic.dehnerts.com name _acme-challenge.unifi.dynamic.dehnerts.com TXT;
+            grant chankillo.dynamic.dehnerts.com name _acme-challenge.mail.dynamic.dehnerts.com TXT;
+            grant chankillo.dynamic.dehnerts.com name _acme-challenge.smtp.dynamic.dehnerts.com TXT;
+            grant chankillo.dynamic.dehnerts.com name _acme-challenge.imap.dynamic.dehnerts.com TXT;
+            grant chankillo.dynamic.dehnerts.com name _acme-challenge.pop.dynamic.dehnerts.com TXT;
+        };
+       allow-transfer { "transfer-allowed"; };
        allow-query { any; };
+       also-notify { "secondary-ns"; };
 };