Klub-RZ/infrastructure
4
0
Fork 0
Code Issues 7 Pull requests Projects Releases Packages Wiki Activity

dns: add nix01.builders.rz.ens.wtf

Browse source
This commit is contained in:
Raito Bezarius 2021-07-28 23:55:23 +02:00
parent 6b7f3d32ff
commit 821b1cdc31
2 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
machines/core-services-01/dns.nix
View file

@ -21,7 +21,7 @@ in
interfaces = my.ipv6.standard;
zones = {
${my.subZone} = {
data = dns.lib.toString my.subZone (import ./subZone.nix { inherit dns config; });
data = dns.lib.toString my.subZone (import ./subZone.nix { inherit dns config lib; });
};
};
};

8
machines/core-services-01/subZone.nix
View file

@ -1,10 +1,14 @@
{ config, dns, ... }:
{ config, lib, dns, ... }:
with dns.lib.combinators;
let
my = config.my;
delegateACMEDNSChallenge = acme: { _acme-challenge.CNAME = [ acme ]; };
remoteBuilders = {
nix01 = [ "2001:470:1f13:187:1e07:c670:3958:f8f1" ];
};
in
with my.ipv6; # contains { standard, acme }
{
@ -31,6 +35,8 @@ with my.ipv6; # contains { standard, acme }
push.AAAA = standard;
ns1.AAAA = standard;
builders.subdomains = lib.mapAttrs (n: AAAA: { inherit AAAA; }) remoteBuilders;
# Délégation de sous zone à he.gdd pour la certification HE.
gdd.subdomains.he = {
NS = [ "ns1.he.gdd.${my.subZone}." ];