Our DNS Zones
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
Daniel Gröber 35b23b7feb Add network docs record 2 months ago
server Add zone enrollment instructions to README 3 months ago
.gitignore Support non-default gpg key 3 months ago
7.0.8.0.4.a.9.c.0.a.2.ip6.arpa.zone Add v6 reverse zone records 3 months ago
Makefile Add more checks to makefile 3 months ago
README Add non-default ssh key instructions to README 3 months ago
it-syndik.at.zone Migrate yxorp VM 6 months ago
it-syndikat.org.zone Add network docs record 2 months ago

README

ITS DNS Zone Managment
======================

This repo contains the primary copies of all our DNS zones.

If you have access to our primary DNS server (dns.parabox.it-syndikat.org),
deploy them using this command:

$ make sign upload

This will sign the zones using gpg using your default key and upload them
to the server using sftp. The server has incron running which will detect
the upload, verify the gpg signature, copy the zones into knot's zone
directory and reload the modified zones.

Beware, you should use an editor that supports auto-incrementing the zone
SOA for the update to be applied sucessfully on the server side. Emacs does
this by default, just say'in.

Note: Knot handles DNSSEC signing on the server side.


Using a non-default GPG/ssh key
-------------------------------

Create a file `local.mk` and specify GPG_FLAGS and/or SFTP_FLAGS as follows:

```
# local.mk
GPG_FLAGS=--default-key=<YOUR KEY FINGERPRINT>
SFTP_FLAGS=~/.ssh/id_non_default
```