01/01: hydra: bayfront: Allow zone transfers to ns1.gnu.org.

[Ludovic Courtès]

civodul pushed a commit to branch master
in repository maintenance.

commit cff9ec245ff1975e9331c3ce5c0de5ba62ce8ba5
Author: Ludovic Courtès <address@hidden>
Date:   Tue Apr 30 21:06:22 2019 +0200

    hydra: bayfront: Allow zone transfers to ns1.gnu.org.
    
    * hydra/bayfront.scm (services) <knot-configuration>: Allow zone
    transfers to ns1.gnu.org.
---
 hydra/bayfront.scm | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/hydra/bayfront.scm b/hydra/bayfront.scm
index 15370a3..cd7780c 100644
--- a/hydra/bayfront.scm
+++ b/hydra/bayfront.scm
@@ -138,10 +138,16 @@ Happy hacking!\n"))
                                              (inherit guix.gnu.org-zone)
                                              (zonefile-load 'difference)
                                              (dnssec-policy "default")
-                                             (acl '("transfer-allow")))))
+                                             (acl '("transfer-allow"
+                                                    "gnu-transfer"))
+                                             (notify '("gnu-master")))))
                               (acls (list (knot-acl-configuration
                                             (id "transfer-allow")
                                             (address (list berlin-ip4))
+                                            (action '(transfer)))
+                                          (knot-acl-configuration
+                                            (id "gnu-transfer")
+                                            (address (list gnu-ns1-ip4))
                                             (action '(transfer)))))
 
                               ;; The 'secrets.conf' file is stored