From 193baa8f2f64a4909e38069d4f21ac6c46d2796b Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Wed, 2 Aug 2023 15:53:27 +0200
Subject: nameserver config: add he.net as secondary

---
 krebs/2configs/nameserver.nix | 10 ++++++++++
 krebs/3modules/zones.nix      |  2 ++
 2 files changed, 12 insertions(+)

diff --git a/krebs/2configs/nameserver.nix b/krebs/2configs/nameserver.nix
index a4c4b5f05..4c6b95516 100644
--- a/krebs/2configs/nameserver.nix
+++ b/krebs/2configs/nameserver.nix
@@ -60,6 +60,9 @@ in {
           any: debug
 
       remote:
+        - id: henet_ns1
+          address: 216.218.130.2
+
         - id: krebscode_ni
           address: ${config.krebs.hosts.ni.nets.internet.ip4.addr}
           key: krebs_transfer_notify_key
@@ -73,6 +76,11 @@ in {
           key: dane
           action: update
 
+        - id: transfer_to_henet_secondary
+          key: henet_transfer_key
+          address: [ 216.218.133.2, 2001:470:600::2 ]
+          action: transfer
+
         - id: transfer_to_krebscode_secondary
           key: krebs_transfer_notify_key
           action: transfer
@@ -101,7 +109,9 @@ in {
           file: ${pkgs.krebs.zones."krebsco.de"}
           dnssec-signing: on
           dnssec-policy: rsa2k
+          notify: henet_ns1
           notify: krebscode_ni
+          acl: transfer_to_henet_secondary
           acl: transfer_to_krebscode_secondary
           acl: dane_acl
 
diff --git a/krebs/3modules/zones.nix b/krebs/3modules/zones.nix
index bf904a268..8cb68c4f7 100644
--- a/krebs/3modules/zones.nix
+++ b/krebs/3modules/zones.nix
@@ -13,6 +13,8 @@ with lib; {
         @ 3600 IN SOA spam.krebsco.de. spam.krebsco.de. 0 7200 3600 86400 3600
         @ 3600 IN NS ns1
         @ 3600 IN NS ni
+        @ 3600 IN NS ns2.he.net.
+        @ 3600 IN NS ns3.he.net.
       '';
     };
   };
-- 
cgit v1.2.3