diff --git a/roles/bind-authoritative/templates/bind/named.conf.local.j2 b/roles/bind-authoritative/templates/bind/named.conf.local.j2 index c5c2b89b..9752be76 100644 --- a/roles/bind-authoritative/templates/bind/named.conf.local.j2 +++ b/roles/bind-authoritative/templates/bind/named.conf.local.j2 @@ -35,6 +35,50 @@ zone "_acme-challenge.crans.org" { file "bak._acme-challenge.crans.org"; }; +zone "_acme-challenge.crans.fr" { +{% if is_master %} + type master; + notify yes; + update-policy { + grant certbot_challenge. name _acme-challenge.crans.fr. txt; + }; +{% else %} + type slave; + masters { +{% for ip in masters_ipv4 %} + {{ ip }}; +{% endfor -%} +{% for ip in masters_ipv6 %} + {{ ip }}; +{% endfor %} + }; + notify no; +{% endif %} + file "bak._acme-challenge.crans.fr"; +}; + +zone "_acme-challenge.crans.eu" { +{% if is_master %} + type master; + notify yes; + update-policy { + grant certbot_challenge. name _acme-challenge.crans.eu. txt; + }; +{% else %} + type slave; + masters { +{% for ip in masters_ipv4 %} + {{ ip }}; +{% endfor -%} +{% for ip in masters_ipv6 %} + {{ ip }}; +{% endfor %} + }; + notify no; +{% endif %} + file "bak._acme-challenge.crans.eu"; +}; + // Crans zones {% for zone in bind.zones|sort %} zone "{{ zone }}" {