Set up acme challenges for duck-dacha/adehnert-pi4

diff --git a/named.conf.olinda b/named.conf.olinda
index fe1585097ebf838a9ee7948574529ce379ef5a87..f8142f5288e08d6062cff3ec2f82a6a11ef43f30 100644 (file)
--- a/named.conf.olinda
+++ b/named.conf.olinda
@@ -3,7 +3,10 @@ include "/etc/bind/pri/dynamic.keys";
 zone "dynamic.dehnerts.com" IN {
        type master;
        file "/etc/bind/dyn/dynamic.zone";
-       update-policy { grant * selfsub * A TXT;};
+       update-policy {
+            grant * selfsub * A TXT;
+            grant adehnert-pi4.dynamic.dehnerts.com name _acme-challenge.duck-dacha.dynamic.dehnerts.com TXT;
+        };
        allow-transfer { "transfer-allowed"; };
        allow-query { any; };
        also-notify { "secondary-ns"; };

diff --git a/pri/combined-dehnerts.zone b/pri/combined-dehnerts.zone
index 4483c2de9768db70d352426e968cb3173ff5aca9..e78145a2ec865be6778501452350c0506ce96ded 100644 (file)
--- a/pri/combined-dehnerts.zone
+++ b/pri/combined-dehnerts.zone
@@ -1,6 +1,6 @@
 $TTL 300
 @       IN      SOA     ns root (
-                                    2021022001 ; Serial
+                                    2021041502 ; Serial
                                     4h         ; slave refresh
                                     15m        ; slave retry time in case of a problem
                                     4w         ; slave expiration time
@@ -40,6 +40,8 @@ virunga IN  CNAME   virunga.mit.edu.
 soviet-russia   IN  A   73.219.64.71
 ; external IP for Duck Dacha(?)
 duck-dacha      IN  A   209.6.38.183
+_acme-challenge.duck-dacha IN  CNAME _acme-challenge.duck-dacha.dynamic
+_acme-challenge.adehnert-pi4 IN  CNAME _acme-challenge.adehnert-pi4.dynamic
 dd-printer      IN  A   192.168.2.11
 
 tikal  IN      A       192.168.1.27