aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--Makefile3
-rw-r--r--unbound.conf.erb2
-rw-r--r--zones/b.6.0.0.8.9.0.1.0.0.a.2.ip6.arpa.zone.erb3
-rw-r--r--zones/le-fay.org.zone.erb13
4 files changed, 13 insertions, 8 deletions
diff --git a/Makefile b/Makefile
index d092efa..01ba98b 100644
--- a/Makefile
+++ b/Makefile
@@ -36,7 +36,8 @@ ZONES!= bin/get_catalog "catalog.invalid" "${MASTER}"
# These zones are always insecure, because they don't exist on the Internet.
INSECURE_ZONES= \
- 18.198.in-addr.arpa
+ 18.198.in-addr.arpa \
+ d.f.ip6.arpa
#######################################################################
# Unbound configuration for resolvers.
diff --git a/unbound.conf.erb b/unbound.conf.erb
index 27b2767..d4fe047 100644
--- a/unbound.conf.erb
+++ b/unbound.conf.erb
@@ -79,6 +79,8 @@ server:
private-domain: sikol.co.uk
+ local-zone: "d.f.ip6.arpa." nodefault
+
# Local zones that we want to serve. Mark these as private so we
# accept our addresses, and if they're local zones, mark them as
# insecure so that the resolver doesn't try to validate the DNSSEC
diff --git a/zones/b.6.0.0.8.9.0.1.0.0.a.2.ip6.arpa.zone.erb b/zones/b.6.0.0.8.9.0.1.0.0.a.2.ip6.arpa.zone.erb
index 6cf7c23..13ad587 100644
--- a/zones/b.6.0.0.8.9.0.1.0.0.a.2.ip6.arpa.zone.erb
+++ b/zones/b.6.0.0.8.9.0.1.0.0.a.2.ip6.arpa.zone.erb
@@ -28,7 +28,6 @@ $ORIGIN <%= zone %>.
<%= v6rev('400::8/48') %> PTR cgit.le-fay.org.
<%= v6rev('400::9/48') %> PTR amaryllis.le-fay.org.
<%= v6rev('400::10/48') %> PTR forge.le-fay.org.
-<%= v6rev('400::11/48') %> PTR freebsd13.le-fay.org.
<%= v6rev('400::12/48') %> PTR freebsd14.le-fay.org.
<%= v6rev('400::13/48') %> PTR tansy.le-fay.org.
<%= v6rev('400::14/48') %> PTR freebsd15.le-fay.org.
@@ -39,4 +38,4 @@ $ORIGIN <%= zone %>.
<%= v6rev('400::19/48') %> PTR ref15q.le-fay.org.
<%= v6rev('400::20/48') %> PTR ref15m.le-fay.org.
<%= v6rev('400::21/48') %> PTR test1.le-fay.org.
-<%= v6rev('400::22/48') %> PTR wolfsbane.le-fay.org.
+<%= v6rev('400:1::1/48') %> PTR nat-rose.le-fay.org.
diff --git a/zones/le-fay.org.zone.erb b/zones/le-fay.org.zone.erb
index f68e613..d92c02e 100644
--- a/zones/le-fay.org.zone.erb
+++ b/zones/le-fay.org.zone.erb
@@ -80,6 +80,9 @@ pkg CNAME nightshade
rose AAAA 2a00:1098:6b:400::1
rose.ipv4 A 176.126.243.164
+; rose network services
+nat-rose AAAA 2a00:1098:6b:400:1::1
+
; rose VMs
amaryllis AAAA 2a00:1098:6b:400::9
cgit AAAA 2a00:1098:6b:400::8
@@ -91,17 +94,17 @@ nightshade.ipv4 A 46.235.229.111
postgres17 AAAA 2a00:1098:6b:400::5
prometheus AAAA 2a00:1098:6b:400::6
tansy AAAA 2a00:1098:6b:400::13
-freebsd13 AAAA 2a00:1098:6b:400::11
+wolfsbane AAAA fd00:0:0:1::1
+
+freebsd13 AAAA fd00:0:0:1::2
+freebsd14 AAAA 2a00:1098:6b:400::12
+freebsd15 AAAA 2a00:1098:6b:400::14
ref13q AAAA 2a00:1098:6b:400::15
ref13m AAAA 2a00:1098:6b:400::16
ref14q AAAA 2a00:1098:6b:400::17
ref14m AAAA 2a00:1098:6b:400::18
ref15q AAAA 2a00:1098:6b:400::19
ref15m AAAA 2a00:1098:6b:400::20
-freebsd14 AAAA 2a00:1098:6b:400::12
-freebsd15 AAAA 2a00:1098:6b:400::14
-test1 AAAA 2a00:1098:6b:400::21
-wolfsbane AAAA 2a00:1098:6b:400::22
; hemlock
hemlock AAAA 2001:8b0:aab5:c401::1:5