This repository has been archived on 2024-02-16. You can view files and clone it, but cannot push or open issues or pull requests.
its-zones/server
2022-02-08 21:50:35 +01:00
..
incrontab Initial commit 2021-04-13 08:06:05 +02:00
knot-gpgv-import server: Fix gpgv script 2021-10-28 04:09:19 +02:00
README Add zone enrollment instructions to README 2022-02-08 21:50:35 +01:00
zone-admin.sshd_config Initial commit 2021-04-13 08:06:05 +02:00
zone-admin.sudoers Initial commit 2021-04-13 08:06:05 +02:00

Server side setup
-----------------

As root:

    $ apt-get install incron
    $ echo <the user on the server>  > /etc/incron.allow
    $ cp zone-admin.sshd_config /etc/ssh/sshd_config.d/zone-admin.conf
    $ cp zone-admin.sudoers /etc/sudoers.d/zone-admin

As the user:

    $ sed 's/$USER/<the user on the server>/g' ./incrontab | incrontab -
    # install knot-gpgv-import into ~/
    $ mkdir zones/

    # Paste your gpg public key + Ctrl-D
    $ gpg --no-default-keyring --keyring $HOME/trustedkeys.kbx -a --import


Enrolling a new zone on server
------------------------------

    $ touch /var/lib/knot/$ZONE.zone
    $ chown root:zone-admin /var/lib/knot/$ZONE.zone
    $ chmod 775 /var/lib/knot/$ZONE.zone