diff --git a/named.conf.local b/named.conf.local index cacedcf..4309432 100644 --- a/named.conf.local +++ b/named.conf.local @@ -12,14 +12,6 @@ acl internals { 127.0.0.1; 192.168.1.0/24; }; -acl notifys { - 51.79.32.63; 167.114.154.31; 37.187.251.136; 37.187.168.234; -}; - -acl transfers { - 127.0.0.1; key tilde_msT; 51.79.32.63; 37.187.251.136; 37.187.168.234; -}; - // KEY include "/etc/bind/tilde_msT.key"; @@ -47,8 +39,8 @@ zone "envs.net" { //auto-dnssec maintain; //inline-signing yes; notify explicit; - also-notify { notifys; }; - allow-transfer { transfers; }; + also-notify { 51.79.32.63; 167.114.154.31; 37.187.251.136; 37.187.168.234; }; + allow-transfer { 127.0.0.1; key tilde_msT; 51.79.32.63; 37.187.251.136; 37.187.168.234; }; update-policy { grant letsencrypt_U name _acme-challenge.envs.net. txt; }; }; @@ -58,8 +50,8 @@ zone "envs.sh" { //auto-dnssec maintain; //inline-signing yes; notify explicit; - also-notify { notifys; }; - allow-transfer { transfers; }; + also-notify { 51.79.32.63; 167.114.154.31; 37.187.251.136; 37.187.168.234; }; + allow-transfer { 127.0.0.1; key tilde_msT; 51.79.32.63; 37.187.251.136; 37.187.168.234; }; update-policy { grant letsencrypt_U name _acme-challenge.envs.sh. txt; }; }; @@ -69,8 +61,8 @@ zone "envs.o" { //auto-dnssec maintain; //inline-signing yes; notify explicit; - also-notify { notifys; }; - allow-transfer { transfers; }; + also-notify { 51.79.32.63; 167.114.154.31; 37.187.251.136; 37.187.168.234; }; + allow-transfer { 127.0.0.1; key tilde_msT; 51.79.32.63; 37.187.251.136; 37.187.168.234; }; update-policy { grant letsencrypt_U name _acme-challenge.envs.o. txt; }; };