From 1e7e51aac14675f1f02b1b737514508009b3a2e5 Mon Sep 17 00:00:00 2001
From: Alexandre Iooss <erdnaxe@crans.org>
Date: Sun, 26 Apr 2020 19:47:44 +0200
Subject: [PATCH] [bind] Can't update slave with key

---
 .../bind-authoritative/templates/bind/named.conf.local.j2 | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/roles/bind-authoritative/templates/bind/named.conf.local.j2 b/roles/bind-authoritative/templates/bind/named.conf.local.j2
index 12b3dce4..780d0e50 100644
--- a/roles/bind-authoritative/templates/bind/named.conf.local.j2
+++ b/roles/bind-authoritative/templates/bind/named.conf.local.j2
@@ -31,6 +31,9 @@ zone "_acme-challenge.crans.org" {
 	{% endfor -%}
 	};
 	notify yes;
+	update-policy {
+		grant certbot_challenge. name _acme-challenge.crans.org txt;
+	};
 	{% else -%}
 	type slave;
 	masters {
@@ -44,10 +47,7 @@ zone "_acme-challenge.crans.org" {
 	allow-transfer { "none"; };
 	notify no;
 	{% endif -%}
-	file "bak.{{ zone }}";
-	update-policy {
-		grant certbot_challenge. name _acme-challenge.crans.org txt;
-	};
+	file "bak._acme-challenge.crans.org";
 };
 
 // Crans zones