dns_auth: support dns slaves

2020-12-07 17:18:07 +01:00 · 2020-12-07 17:18:07 +01:00 · 0484e91693
commit 0484e91693
parent 19faa44f0c
2 changed files with 5 additions and 1 deletions
--- a/group_vars/all/vars.yml
+++ b/group_vars/all/vars.yml
@ -8,6 +8,10 @@ dnsdist_targets:
 - gw31.regensburg.freifunk.net:8053
 - resolver.regensburg.freifunk.net:8053

+dns_slaves:
+- 195.201.117.207
+- 2a01:4f8:1c0c:7dda::1
+
 fastd_targets:
 - gw11.regensburg.freifunk.net:9281
 - gw21.regensburg.freifunk.net:9281
--- a/roles/dns_auth/templates/pdns.conf.j2
+++ b/roles/dns_auth/templates/pdns.conf.j2
@ -2,7 +2,7 @@
 # allow-axfr-ips	Allow zonetransfers only to these subnets
 #
 # allow-axfr-ips=127.0.0.0/8,::1
-allow-axfr-ips=127.0.0.1,::1
+allow-axfr-ips=127.0.0.1,::1,{{ dns_slaves | join(',') }}

 #################################
 # dname-processing	If we should support DNAME records