From 2dbd6d7840f3cbbd634ab0def9b80763f4502213 Mon Sep 17 00:00:00 2001
From: Ben Harris <ben@tilde.team>
Date: Mon, 30 Dec 2019 11:47:59 -0500
Subject: use acl and master lists

---
 named.conf.tilde | 45 ++++++++++++++++++++++++++++-----------------
 1 file changed, 28 insertions(+), 17 deletions(-)

(limited to 'named.conf.tilde')

diff --git a/named.conf.tilde b/named.conf.tilde
index 3c79b99..fa9b376 100644
--- a/named.conf.tilde
+++ b/named.conf.tilde
@@ -1,62 +1,73 @@
+acl "tildenameservers" {
+	213.239.234.117;
+	149.56.184.112;
+	192.95.3.29;
+};
+masters "tildenameservers" {
+	213.239.234.117;
+	149.56.184.112;
+	192.95.3.29;
+};
+
 zone "tilde" IN {
 	type forward;
 	forward only;
-	forwarders { 213.239.234.117; 149.56.184.112; };
+	forwarders { 213.239.234.117; 149.56.184.112; 192.95.3.29; };
 };
 
 zone "team.tilde" {
         type master;
         file "/etc/bind/zones/tilde/db.team.tilde";
-	allow-transfer { 213.239.234.117; 149.56.184.112; };
-	also-notify { 213.239.234.117; 149.56.184.112; };
+	allow-transfer { "tildenameservers"; };
+	also-notify { "tildenameservers"; };
 };
 
 zone "git.tilde" {
         type master;
         file "/etc/bind/zones/tilde/db.git.tilde";
-	allow-transfer { 213.239.234.117; 149.56.184.112; };
-	also-notify { 213.239.234.117; 149.56.184.112; };
+	allow-transfer { "tildenameservers"; };
+	also-notify { "tildenameservers"; };
 };
 
 zone "mastodon.tilde" {
         type master;
         file "/etc/bind/zones/tilde/db.mastodon.tilde";
-	allow-transfer { 213.239.234.117; 149.56.184.112; };
-	also-notify { 213.239.234.117; 149.56.184.112; };
+	allow-transfer { "tildenameservers"; };
+	also-notify { "tildenameservers"; };
 };
 
 zone "lists.tilde" {
         type master;
         file "/etc/bind/zones/tilde/db.lists.tilde";
-	allow-transfer { 213.239.234.117; 149.56.184.112; };
-	also-notify { 213.239.234.117; 149.56.184.112; };
+	allow-transfer { "tildenameservers"; };
+	also-notify { "tildenameservers"; };
 };
 
 zone "chat.tilde" {
         type master;
         file "/etc/bind/zones/tilde/db.chat.tilde";
-	allow-transfer { 213.239.234.117; 149.56.184.112; };
-	also-notify { 213.239.234.117; 149.56.184.112; };
+	allow-transfer { "tildenameservers"; };
+	also-notify { "tildenameservers"; };
 };
 
 zone "ci.tilde" {
         type master;
         file "/etc/bind/zones/tilde/db.ci.tilde";
-	allow-transfer { 213.239.234.117; 149.56.184.112; };
-	also-notify { 213.239.234.117; 149.56.184.112; };
+	allow-transfer { "tildenameservers"; };
+	also-notify { "tildenameservers"; };
 };
 
 zone "pleroma.tilde" {
         type master;
         file "/etc/bind/zones/tilde/db.pleroma.tilde";
-	allow-transfer { 213.239.234.117; 149.56.184.112; };
-	also-notify { 213.239.234.117; 149.56.184.112; };
+	allow-transfer { "tildenameservers"; };
+	also-notify { "tildenameservers"; };
 };
 
 zone "news.tilde" {
         type master;
         file "/etc/bind/zones/tilde/db.news.tilde";
-	allow-transfer { 213.239.234.117; 149.56.184.112; };
-	also-notify { 213.239.234.117; 149.56.184.112; };
+	allow-transfer { "tildenameservers"; };
+	also-notify { "tildenameservers"; };
 };
 
-- 
cgit 1.4.1