From 821b1cdc31b1e6aff8f15209c291b00dc17675b1 Mon Sep 17 00:00:00 2001 From: Raito Bezarius Date: Wed, 28 Jul 2021 23:55:23 +0200 Subject: [PATCH] dns: add nix01.builders.rz.ens.wtf --- machines/core-services-01/dns.nix | 2 +- machines/core-services-01/subZone.nix | 8 +++++++- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/machines/core-services-01/dns.nix b/machines/core-services-01/dns.nix index 2161481..6473038 100644 --- a/machines/core-services-01/dns.nix +++ b/machines/core-services-01/dns.nix @@ -21,7 +21,7 @@ in interfaces = my.ipv6.standard; zones = { ${my.subZone} = { - data = dns.lib.toString my.subZone (import ./subZone.nix { inherit dns config; }); + data = dns.lib.toString my.subZone (import ./subZone.nix { inherit dns config lib; }); }; }; }; diff --git a/machines/core-services-01/subZone.nix b/machines/core-services-01/subZone.nix index 306dc68..83e143c 100644 --- a/machines/core-services-01/subZone.nix +++ b/machines/core-services-01/subZone.nix @@ -1,10 +1,14 @@ -{ config, dns, ... }: +{ config, lib, dns, ... }: with dns.lib.combinators; let my = config.my; delegateACMEDNSChallenge = acme: { _acme-challenge.CNAME = [ acme ]; }; + + remoteBuilders = { + nix01 = [ "2001:470:1f13:187:1e07:c670:3958:f8f1" ]; + }; in with my.ipv6; # contains { standard, acme } { @@ -31,6 +35,8 @@ with my.ipv6; # contains { standard, acme } push.AAAA = standard; ns1.AAAA = standard; + builders.subdomains = lib.mapAttrs (n: AAAA: { inherit AAAA; }) remoteBuilders; + # Délégation de sous zone à he.gdd pour la certification HE. gdd.subdomains.he = { NS = [ "ns1.he.gdd.${my.subZone}." ];