From a35c9a4ecdf465d8e7a23e8c2ea490413957d4e9 Mon Sep 17 00:00:00 2001 From: Dryusdan Date: Thu, 23 Jun 2022 12:48:13 +0200 Subject: [PATCH] Add a NOKEY option for some slave --- README.md | 10 ++++++---- templates/nsd.conf.j2 | 14 ++++++++++---- 2 files changed, 16 insertions(+), 8 deletions(-) diff --git a/README.md b/README.md index 716b5f3..e2360d1 100644 --- a/README.md +++ b/README.md @@ -9,13 +9,15 @@ zones: - name: dryusdan.space secret: AMAIZINGSECRET slaves: - - 5.6.7.8 - - 9.10.11.12 + - ip: 5.6.7.8 + - ip: 9.10.11.12 + nokey: True - name: drycat.fr secret: AMAIZINGSECRET slaves: - - 5.6.7.8 - - 9.10.11.12 + - ip: 5.6.7.8 + - ip: 9.10.11.12 + nokey: True ``` Slave diff --git a/templates/nsd.conf.j2 b/templates/nsd.conf.j2 index 850e674..a8332d4 100644 --- a/templates/nsd.conf.j2 +++ b/templates/nsd.conf.j2 @@ -213,15 +213,21 @@ zone: {% if zone.slaves is defined %} {% for slave in zone.slaves %} {% if zone.secret is defined %} - notify: {{ slave }} {{ zone.name }}-key - provide-xfr: {{ slave }} {{ zone.name }}-key + {% if slave.nokey is defined %} + notify: {{ slave.ip }} NOKEY + provide-xfr: {{ slave.ip }} NOKEY + {% else %} + notify: {{ slave.ip }} {{ zone.name }}-key + provide-xfr: {{ slave.ip }} {{ zone.name }}-key + {% endif %} {% else %} - notify: {{ slave }} NOKEY - provide-xfr: {{ slave }} NOKEY + notify: {{ slave.ip }} NOKEY + provide-xfr: {{ slave.ip }} NOKEY {% endif %} {% endfor %} {% endif %} {% if zone.masters is defined %} + {% for master in zone.masters %} {% if zone.secret is defined %} allow-notify: {{ master }} {{ zone.name }}-key