72 lines
1.3 KiB
YAML
72 lines
1.3 KiB
YAML
|
---
|
||
|
|
knotd__listen:
|
||
|
|
- address: 0.0.0.0
|
||
|
|
- address: "::"
|
||
|
|
|
||
|
|
knotd__keys:
|
||
|
|
xfr:
|
||
|
|
algorithm: hmac-sha512
|
||
|
|
secret: "{{ vault_knotd_xfr_key }}"
|
||
|
|
|
||
|
|
knotd__remotes:
|
||
|
|
xfr-master:
|
||
|
|
address: 2a09:6840:206::1:7
|
||
|
|
key: xfr
|
||
|
|
|
||
|
|
knotd__acl:
|
||
|
|
notify-master:
|
||
|
|
address:
|
||
|
|
- 2a09:6840:206::1:7
|
||
|
|
- 10.206.1.7
|
||
|
|
key: xfr
|
||
|
|
action: notify
|
||
|
|
|
||
|
|
knotd__queryacl:
|
||
|
|
local:
|
||
|
|
addresses:
|
||
|
|
- 10.0.0.0/8
|
||
|
|
|
||
|
|
knotd__zones:
|
||
|
|
auro.re:
|
||
|
|
dnssec_validation: true
|
||
|
|
acl:
|
||
|
|
- notify-master
|
||
|
|
master: xfr-master
|
||
|
|
test.auro.re:
|
||
|
|
dnssec_validation: true
|
||
|
|
acl:
|
||
|
|
- notify-master
|
||
|
|
master: xfr-master
|
||
|
|
infra.auro.re:
|
||
|
|
dnssec_validation: true
|
||
|
|
acl:
|
||
|
|
- notify-master
|
||
|
|
#queryacl: local
|
||
|
|
master: xfr-master
|
||
|
|
108.66.45.in-addr.arpa:
|
||
|
|
dnssec_validation: false
|
||
|
|
acl:
|
||
|
|
- notify-master
|
||
|
|
master: xfr-master
|
||
|
|
109.66.45.in-addr.arpa:
|
||
|
|
dnssec_validation: false
|
||
|
|
acl:
|
||
|
|
- notify-master
|
||
|
|
master: xfr-master
|
||
|
|
110.66.45.in-addr.arpa:
|
||
|
|
dnssec_validation: false
|
||
|
|
acl:
|
||
|
|
- notify-master
|
||
|
|
master: xfr-master
|
||
|
|
111.66.45.in-addr.arpa:
|
||
|
|
dnssec_validation: false
|
||
|
|
acl:
|
||
|
|
- notify-master
|
||
|
|
master: xfr-master
|
||
|
|
0.4.8.6.9.0.a.2.ip6.arpa:
|
||
|
|
dnssec_validation: false
|
||
|
|
acl:
|
||
|
|
- notify-master
|
||
|
|
master: xfr-master
|
||
|
|
...
|