From 6984782b4803b2c60b3658b46a645d1d31c095e5 Mon Sep 17 00:00:00 2001 From: mirsal Date: Tue, 29 Jul 2025 19:03:11 +0000 Subject: [PATCH] nsd.conf: Set up ns1.1312.zone as secondary for labolyon.fr /!\ TSIG keys need to be rotated because this repository is public, so all exposed cryptographic keys should be considered compromised --- ansible/roles/dns-internal/templates/nsd.conf | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/ansible/roles/dns-internal/templates/nsd.conf b/ansible/roles/dns-internal/templates/nsd.conf index f2c2fa2..b7560c6 100644 --- a/ansible/roles/dns-internal/templates/nsd.conf +++ b/ansible/roles/dns-internal/templates/nsd.conf @@ -14,6 +14,11 @@ key: algorithm: hmac-sha256 secret: "Qeb50ATVYRNGQ2dPZKq1ZRn9q8s=" +key: + name: "dns_labolyon_fr_to_ns1_1312_zone" + algorithm: hmac-sha256 + secret: "Yq3pcYcWvMVW4Ckk/iP8MfV5qGzyTmLvgeKaulllMoI=" + zone: name: "int.labolyon.fr" zonefile: "int.labolyon.fr.zone" @@ -30,3 +35,6 @@ zone: provide-xfr: 2a0e:e701:11e7:cafe:3737::1 clesecrete notify: 45.13.105.181 clesecrete provide-xfr: 45.13.105.181 clesecrete + ## ns1.1312.zone + notify: 2a03:b0c0:2:d0::12f0:4001 dns_labolyon_fr_to_ns1_1312_zone + provide-xfr: 2a03:b0c0:2:d0::12f0:4001 dns_labolyon_fr_to_ns1_1312_zone