Notify secondary servers

This commit is contained in:
niten 2023-11-08 14:40:32 -08:00
parent 9e1e23bfc6
commit 5a90ddc3bb
2 changed files with 6 additions and 2 deletions

View File

@ -92,10 +92,12 @@ in {
stateDirectory = cfg.state-directory; stateDirectory = cfg.state-directory;
zones = let zones = let
forwardZones = mapAttrs' (domain: forwardZones = mapAttrs' (domain:
{ ksk, zone, ... }: { ksk, zone, nameservers, ... }:
nameValuePair "${domain}." { nameValuePair "${domain}." {
dnssec = ksk.key-file != null; dnssec = ksk.key-file != null;
ksk.keyFile = ksk.key-file; ksk.keyFile = ksk.key-file;
provideXFR = map (ns: "${ns}/32 NOKEY") nameservers;
notify = map (ns: "${ns} NOKEY") nameservers;
data = zoneToZonefile { data = zoneToZonefile {
inherit domain; inherit domain;
inherit (cfg) timestamp; inherit (cfg) timestamp;
@ -103,7 +105,7 @@ in {
}; };
}) cfg.domains; }) cfg.domains;
reverseZones = concatMapAttrs (domain: reverseZones = concatMapAttrs (domain:
{ ksk, zone, reverse-zones, ... }: { ksk, zone, nameservers, reverse-zones, ... }:
listToAttrs (map (network: listToAttrs (map (network:
reverseZonefile { reverseZonefile {
inherit domain network; inherit domain network;

View File

@ -54,6 +54,8 @@ let
in nameValuePair "${getNetworkZoneName network}" { in nameValuePair "${getNetworkZoneName network}" {
dnssec = keyFile != null; dnssec = keyFile != null;
ksk.keyFile = keyFile; ksk.keyFile = keyFile;
provideXFR = map (ns: "${ns}/32 NOKEY") nameservers;
notify = map (ns: "${ns} NOKEY") nameservers;
data = '' data = ''
$ORIGIN ${getNetworkZoneName network} $ORIGIN ${getNetworkZoneName network}
$TTL ${toString zoneTTL} $TTL ${toString zoneTTL}