dns server now fully managed using rex

12 files changed, 21 insertions, 98 deletions

diff --git a/openbsd/frontends/var/nsd/etc/nsd.conf.master.tpl b/openbsd/frontends/var/nsd/etc/nsd.conf.master.tpl
index 535acea..310550a 100644
--- a/openbsd/frontends/var/nsd/etc/nsd.conf.master.tpl
+++ b/openbsd/frontends/var/nsd/etc/nsd.conf.master.tpl
@@ -10,50 +10,10 @@ remote-control:
 	control-enable: yes
 	control-interface: /var/run/nsd.sock
 
+<% for my $zone (@$dns_zones) { %>
 zone:
-	name: "buetow.org"
-	zonefile: "master/buetow.org.zone"
-	notify: 108.160.134.135 blowfish.buetow.org
-	provide-xfr: 108.160.134.135 blowfish.buetow.org
-
-zone:
-	name: "dtail.dev"
-	zonefile: "master/dtail.dev.zone"
-	notify: 108.160.134.135 blowfish.buetow.org
-	provide-xfr: 108.160.134.135 blowfish.buetow.org
-
-zone:
-	name: "foo.zone"
-	zonefile: "master/foo.zone.zone"
-	notify: 108.160.134.135 blowfish.buetow.org
-	provide-xfr: 108.160.134.135 blowfish.buetow.org
-
-zone:
-	name: "foo.surf"
-	zonefile: "master/foo.surf.zone"
-	notify: 108.160.134.135 blowfish.buetow.org
-	provide-xfr: 108.160.134.135 blowfish.buetow.org
-
-zone:
-	name: "snonux.de"
-	zonefile: "master/snonux.de.zone"
-	notify: 108.160.134.135 blowfish.buetow.org
-	provide-xfr: 108.160.134.135 blowfish.buetow.org
-
-zone:
-	name: "irregular.ninja"
-	zonefile: "master/irregular.ninja.zone"
-	notify: 108.160.134.135 blowfish.buetow.org
-	provide-xfr: 108.160.134.135 blowfish.buetow.org
-
-zone:
-	name: "sidewalk.ninja"
-	zonefile: "master/sidewalk.ninja.zone"
-	notify: 108.160.134.135 blowfish.buetow.org
-	provide-xfr: 108.160.134.135 blowfish.buetow.org
-
-zone:
-	name: "snonux.me"
-	zonefile: "master/snonux.me.zone"
+	name: "<%= $zone %>"
+	zonefile: "master/<%= $zone %>.zone"
 	notify: 108.160.134.135 blowfish.buetow.org
 	provide-xfr: 108.160.134.135 blowfish.buetow.org
+<% } %>
diff --git a/openbsd/frontends/var/nsd/etc/nsd.conf.slave.tpl b/openbsd/frontends/var/nsd/etc/nsd.conf.slave.tpl
new file mode 100644
index 0000000..d9d93fe
--- /dev/null
+++ b/openbsd/frontends/var/nsd/etc/nsd.conf.slave.tpl
@@ -0,0 +1,17 @@
+include: "/var/nsd/etc/key.conf"
+
+server:
+	hide-version: yes
+	verbosity: 1
+	database: "" # disable database
+
+remote-control:
+	control-enable: yes
+	control-interface: /var/run/nsd.sock
+
+<% for my $zone (@$dns_zones) { %>
+zone:
+	name: "<%= $zone %>"
+	allow-notify: 23.88.35.144 blowfish.buetow.org
+	request-xfr: 23.88.35.144 blowfish.buetow.org
+<% } %>
diff --git a/openbsd/frontends/var/nsd/zones.master/buetow.org.zone.tpl b/openbsd/frontends/var/nsd/zones/master/buetow.org.zone.tpl
index 42bff2d..42bff2d 100644
--- a/openbsd/frontends/var/nsd/zones.master/buetow.org.zone.tpl
+++ b/openbsd/frontends/var/nsd/zones/master/buetow.org.zone.tpl
diff --git a/openbsd/frontends/var/nsd/zones.master/dtail.dev.zone.tpl b/openbsd/frontends/var/nsd/zones/master/dtail.dev.zone.tpl
index 0d67272..0d67272 100644
--- a/openbsd/frontends/var/nsd/zones.master/dtail.dev.zone.tpl
+++ b/openbsd/frontends/var/nsd/zones/master/dtail.dev.zone.tpl
diff --git a/openbsd/frontends/var/nsd/zones.master/foo.surf.zone.tpl b/openbsd/frontends/var/nsd/zones/master/foo.surf.zone.tpl
index e92b881..e92b881 100644
--- a/openbsd/frontends/var/nsd/zones.master/foo.surf.zone.tpl
+++ b/openbsd/frontends/var/nsd/zones/master/foo.surf.zone.tpl
diff --git a/openbsd/frontends/var/nsd/zones.master/foo.zone.zone.tpl b/openbsd/frontends/var/nsd/zones/master/foo.zone.zone.tpl
index 4efbf3d..4efbf3d 100644
--- a/openbsd/frontends/var/nsd/zones.master/foo.zone.zone.tpl
+++ b/openbsd/frontends/var/nsd/zones/master/foo.zone.zone.tpl
diff --git a/openbsd/frontends/var/nsd/zones.master/irregular.ninja.zone.tpl b/openbsd/frontends/var/nsd/zones/master/irregular.ninja.zone.tpl
index d3c55e5..d3c55e5 100644
--- a/openbsd/frontends/var/nsd/zones.master/irregular.ninja.zone.tpl
+++ b/openbsd/frontends/var/nsd/zones/master/irregular.ninja.zone.tpl
diff --git a/openbsd/frontends/var/nsd/zones.master/sidewalk.ninja.zone.tpl b/openbsd/frontends/var/nsd/zones/master/sidewalk.ninja.zone.tpl
index 42b1db7..42b1db7 100644
--- a/openbsd/frontends/var/nsd/zones.master/sidewalk.ninja.zone.tpl
+++ b/openbsd/frontends/var/nsd/zones/master/sidewalk.ninja.zone.tpl
diff --git a/openbsd/frontends/var/nsd/zones.master/snonux.de.zone.tpl b/openbsd/frontends/var/nsd/zones/master/snonux.de.zone.tpl
index cc530b6..cc530b6 100644
--- a/openbsd/frontends/var/nsd/zones.master/snonux.de.zone.tpl
+++ b/openbsd/frontends/var/nsd/zones/master/snonux.de.zone.tpl
diff --git a/openbsd/frontends/var/nsd/zones.master/snonux.me.zone.tpl b/openbsd/frontends/var/nsd/zones/master/snonux.me.zone.tpl
index e756998..e756998 100644
--- a/openbsd/frontends/var/nsd/zones.master/snonux.me.zone.tpl
+++ b/openbsd/frontends/var/nsd/zones/master/snonux.me.zone.tpl
diff --git a/openbsd/frontends/var/nsd:blowfish/etc/key.conf.templ b/openbsd/frontends/var/nsd:blowfish/etc/key.conf.templ
deleted file mode 100644
index 36e855f..0000000
--- a/openbsd/frontends/var/nsd:blowfish/etc/key.conf.templ
+++ /dev/null
@@ -1,4 +0,0 @@
-key:
-        name: blowfish.buetow.org
-        algorithm: hmac-sha256
-	secret: %%ADDSECRETHEREIN"MARKS%%
diff --git a/openbsd/frontends/var/nsd:twofish/etc/nsd.conf b/openbsd/frontends/var/nsd:twofish/etc/nsd.conf
deleted file mode 100644
index 0727d89..0000000
--- a/openbsd/frontends/var/nsd:twofish/etc/nsd.conf
+++ /dev/null
@@ -1,50 +0,0 @@
-include: "/var/nsd/etc/key.conf"
-
-server:
-	hide-version: yes
-	verbosity: 1
-	database: "" # disable database
-
-remote-control:
-	control-enable: yes
-	control-interface: /var/run/nsd.sock
-
-zone:
-	name: "buetow.org"
-	allow-notify: 23.88.35.144 blowfish.buetow.org
-	request-xfr: 23.88.35.144 blowfish.buetow.org
-
-zone:
-	name: "dtail.dev"
-	allow-notify: 23.88.35.144 blowfish.buetow.org
-	request-xfr: 23.88.35.144 blowfish.buetow.org
-
-zone:
-	name: "foo.zone"
-	allow-notify: 23.88.35.144 blowfish.buetow.org
-	request-xfr: 23.88.35.144 blowfish.buetow.org
-
-zone:
-	name: "foo.surf"
-	allow-notify: 23.88.35.144 blowfish.buetow.org
-	request-xfr: 23.88.35.144 blowfish.buetow.org
-
-zone:
-	name: "snonux.de"
-	allow-notify: 23.88.35.144 blowfish.buetow.org
-	request-xfr: 23.88.35.144 blowfish.buetow.org
-
-zone:
-	name: "irregular.ninja"
-	allow-notify: 23.88.35.144 blowfish.buetow.org
-	request-xfr: 23.88.35.144 blowfish.buetow.org
-
-zone:
-	name: "sidewalk.ninja"
-	allow-notify: 23.88.35.144 blowfish.buetow.org
-	request-xfr: 23.88.35.144 blowfish.buetow.org
-
-zone:
-	name: "snonux.me"
-	allow-notify: 23.88.35.144 blowfish.buetow.org
-	request-xfr: 23.88.35.144 blowfish.buetow.org