X-Git-Url: https://dehnerts.com/gitweb/?a=blobdiff_plain;f=named.conf.chankillo;h=0786a25e76406405f64cab10d9649464afdaa115;hb=8a1892eba22fd101043f999e27d90a2d4917aae4;hp=eb9e510cb8ebf98bb66519e396bf7db4bd2eb1c2;hpb=d546284681ca267bd1a7a4e0816b54cc35a97d38;p=sysconfig%2Fbind.git

diff --git a/named.conf.chankillo b/named.conf.chankillo
index eb9e510..0786a25 100644
--- a/named.conf.chankillo
+++ b/named.conf.chankillo
@@ -1,8 +1,20 @@
+include "/etc/bind/pri/dynamic.keys";
+
 zone "dynamic.dehnerts.com" IN {
-	// secondary is equivalent, starting in bind-9.15.8
-	// https://github.com/isc-projects/bind9/commit/79c2400d91b818e66a45494784cea17f46e807f2
-	type secondary;
+	type master;
 	file "/var/lib/bind/dynamic.dehnerts.zone";
-	masters { "primary-ns"; };
+	update-policy {
+            grant * selfsub * A TXT;
+            grant xidi.dynamic.dehnerts.com name _acme-challenge.duck-dacha.dynamic.dehnerts.com TXT;
+            grant xidi.dynamic.dehnerts.com name _acme-challenge.homeassistant.dynamic.dehnerts.com TXT;
+            grant xidi.dynamic.dehnerts.com name _acme-challenge.pihole.dynamic.dehnerts.com TXT;
+            grant xidi.dynamic.dehnerts.com name _acme-challenge.unifi.dynamic.dehnerts.com TXT;
+            grant chankillo.dynamic.dehnerts.com name _acme-challenge.mail.dynamic.dehnerts.com TXT;
+            grant chankillo.dynamic.dehnerts.com name _acme-challenge.smtp.dynamic.dehnerts.com TXT;
+            grant chankillo.dynamic.dehnerts.com name _acme-challenge.imap.dynamic.dehnerts.com TXT;
+            grant chankillo.dynamic.dehnerts.com name _acme-challenge.pop.dynamic.dehnerts.com TXT;
+        };
+	allow-transfer { "transfer-allowed"; };
 	allow-query { any; };
+	also-notify { "secondary-ns"; };
 };