--- /dev/null
+zone "dynamic.dehnerts.com" IN {
+ // secondary is equivalent, starting in bind-9.15.8
+ // https://github.com/isc-projects/bind9/commit/79c2400d91b818e66a45494784cea17f46e807f2
+ type slave;
+ file "/var/lib/bind/dynamic.dehnerts.zone";
+ masters { "primary-ns"; };
+ allow-query { any; };
+};
-include "/etc/bind/pri/dynamic.keys";
-
-zone "dynamic.dehnerts.com" IN {
- type master;
- file "/etc/bind/dyn/dynamic.zone";
- update-policy {
- grant * selfsub * A TXT;
- grant adehnert-pi4.dynamic.dehnerts.com name _acme-challenge.duck-dacha.dynamic.dehnerts.com TXT;
- grant adehnert-pi4.dynamic.dehnerts.com name _acme-challenge.homeassistant.dynamic.dehnerts.com TXT;
- grant adehnert-pi4.dynamic.dehnerts.com name _acme-challenge.pihole.dynamic.dehnerts.com TXT;
- grant adehnert-pi4.dynamic.dehnerts.com name _acme-challenge.unifi.dynamic.dehnerts.com TXT;
- grant xidi.dynamic.dehnerts.com name _acme-challenge.duck-dacha.dynamic.dehnerts.com TXT;
- grant xidi.dynamic.dehnerts.com name _acme-challenge.homeassistant.dynamic.dehnerts.com TXT;
- grant xidi.dynamic.dehnerts.com name _acme-challenge.pihole.dynamic.dehnerts.com TXT;
- grant xidi.dynamic.dehnerts.com name _acme-challenge.unifi.dynamic.dehnerts.com TXT;
- grant adehnert-test-d.dynamic.dehnerts.com name _acme-challenge.squaresdb.dynamic.dehnerts.com TXT;
- };
- allow-transfer { "transfer-allowed"; };
- allow-query { any; };
- also-notify { "secondary-ns"; };
-};
+include "/etc/bind/config/dyndehnerts-secondary.conf";