auth-dns: switch from HE dns to ns-global and puck
1 file changed, 13 insertions(+), 1 deletion(-)
changed files
M system/roles/auth-dns.nix → system/roles/auth-dns.nix
@@ -5,6 +5,17 @@ ... }: let domain = config.networking.domain; + + ns_global = [ + "2607:7c80:54:6::53" + "204.87.183.53" + ]; + puck = [ + "2602:fe55:5::5" + "204.42.254.5" + ]; + + comma = builtins.concatStringsSep ","; in { imports = [@@ -27,7 +38,8 @@ launch=gsqlite3 dnsupdate=yes allow-dnsupdate-from=0.0.0.0/0,::/0 dnsupdate-require-tsig=yes - only-notify=!2001:470:100::2 + also-notify=${comma ns_global} + allow-axfr-ips=${comma (puck ++ ns_global)} expand-alias=yes outgoing-axfr-expand-alias=yes # needed with DNSSEC svc-autohints=yes