Commit 772a1aa0 authored by wtfismyip's avatar wtfismyip
Browse files

Setup rndc-control

parent d03fb244
......@@ -2,3 +2,4 @@ wtf/static/GeoIP/*
nginx/nginx/certs/*
wtf/docker/*
docker-compose.yaml
debian-bind/rndc.key
......@@ -6,4 +6,5 @@ RUN apt update
RUN apt install -y bind9 vim procps dnsutils
COPY named.conf /etc/bind/named.conf
COPY start.sh /etc/bind
COPY rndc.key /etc/bind
CMD [ "bash", "-c", "/etc/bind/start.sh" ]
include "/etc/bind/rndc.key";
options {
directory "/var/cache/bind";
dnssec-validation auto;
......@@ -5,3 +7,10 @@ options {
recursion yes;
allow-query { 172.19.1.0/24; };
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "designate"; };
};
......@@ -11,7 +11,7 @@ services:
unbound:
restart: unless-stopped
runtime: runsc-kvm
image: "us-docker.pkg.dev/omgwtfbbq/gcr.io/debian-bind:1"
image: "us-docker.pkg.dev/omgwtfbbq/gcr.io/debian-bind:2"
#image: "us-docker.pkg.dev/omgwtfbbq/gcr.io/alpine-unbound:14"
volumes:
- "/docker/resolv.conf:/etc/resolv.conf"
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment