crans
/
ansible
mirror of http://gitlab.adm.crans.org/nounous/ansible.git
19
0
Fork 0
Code Issues Projects Releases Wiki Activity

[bind-authoritative] Add zone _acme-challenge.adm.crans.org

certbot_on_virtu
_benjamin 2020-05-01 16:59:47 +02:00
parent aa47c499c6
commit e54244e0c7
1 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
roles/bind-authoritative/templates/bind/named.conf.local.j2
View File

@ -35,6 +35,29 @@ zone "_acme-challenge.crans.org" {
file "bak._acme-challenge.crans.org";
};
// Let's Encrypt Challenge DNS-01 zone
zone "_acme-challenge.adm.crans.org" {
{% if is_master %}
type master;
notify yes;
update-policy {
grant certbot_challenge. name _acme-challenge.adm.crans.org. txt;
};
{% else %}
type slave;
masters {
{% for ip in masters_ipv4 %}
{{ ip }};
{% endfor -%}
{% for ip in masters_ipv6 %}
{{ ip }};
{% endfor %}
};
notify no;
{% endif %}
file "bak._acme-challenge.adm.crans.org";
};
zone "_acme-challenge.crans.fr" {
{% if is_master %}
type master;