diff options
-rw-r--r-- | dns.nix | 53 |
1 files changed, 30 insertions, 23 deletions
diff --git a/dns.nix b/dns.nix index 1e1b0ea..31554cd 100644 --- a/dns.nix +++ b/dns.nix @@ -22,12 +22,15 @@ let in '' @ SOA danh.loang.net. cnx.loang.net. ${s} 14400 3600 604800 3600 @ NS danh.loang.net. + @ NS puck.nether.net. @ A 37.205.11.127 @ AAAA 2a03:3b40:100::1:2 ''; - openNICZone = domain: serial: { + openNICZone = domain: file: { domain = domain; - file = builtins.toFile "${domain}.zone" (localZone serial); + file = builtins.toFile "${domain}.zone" file; + notify = "puck"; + acl = [ "puck" ]; dnssec-signing = false; }; in { @@ -45,9 +48,13 @@ in { server.listen = [ "0.0.0.0@53" "::@53" ]; remote = [ { - id = "secondary"; + id = "ns-global"; address = [ "204.87.183.53@53" "2607:7c80:54:6::53@53" ]; } + { + id = "puck"; + address = [ "204.42.254.5@53" "2001:418:3f4::5@53" ]; + } ]; log = [ { @@ -57,11 +64,16 @@ in { ]; acl = [ { - id = "secondary"; + id = "ns-global"; address = [ "204.87.183.53" "2607:7c80:54:6::53" ]; action = "transfer"; } { + id = "puck"; + address = [ "204.42.254.5" "2001:418:3f4::5" ]; + action = "transfer"; + } + { id = "xarvos"; key = "xrvs.net"; action = "update"; @@ -77,33 +89,28 @@ in { } ]; zone = [ - (openNICZone "cercle.libre" 2023021702) + (openNICZone "cercle.libre" (localZone 2023021702)) { domain = "cnx.gdn"; - notify = "secondary"; - acl = [ "secondary" ]; + notify = "ns-global"; + acl = [ "ns-global" ]; } { domain = "loang.net"; - notify = "secondary"; - acl = [ "secondary" ]; - } - (openNICZone "musike.pirate" 2023071727) - (openNICZone "rub.parody" 2023032101) - { - domain = "sinyx.indy"; - file = builtins.toFile "sinyx.indy.zone" - ((localZone 2023022002) + '' - * A 37.205.11.127 - * AAAA 2a03:3b40:100::1:2 - ''); - dnssec-signing = false; + notify = "ns-global"; + acl = [ "ns-global" ]; } - (openNICZone "striproman.pirate" 2023022023) + (openNICZone "musike.pirate" (localZone 2023071727)) + (openNICZone "rub.parody" (localZone 2023032101)) + (openNICZone "sinyx.indy" ((localZone 2023022002) + '' + * A 37.205.11.127 + * AAAA 2a03:3b40:100::1:2 + '')) + (openNICZone "striproman.pirate" (localZone 2023022023)) { domain = "xrvs.net"; - notify = "secondary"; - acl = [ "secondary" "xarvos" ]; + notify = "ns-global"; + acl = [ "ns-global" "xarvos" ]; } ]; }; |