X-Git-Url: https://iankelling.org/git/?p=distro-setup;a=blobdiff_plain;f=machine_specific%2Fli%2Ffilesystem%2Fetc%2Fbind%2Fnamed.conf.local;h=5253a12e061a5e9b7790fd8643da240c17cb7c67;hp=126da01bd5785759bec84581391fd38e448bcdd7;hb=fbb0315374736f92d950545796beaa79cbdc1f49;hpb=81c96f9277947ed5772e16b344d0ab8cb48b65e0

diff --git a/machine_specific/li/filesystem/etc/bind/named.conf.local b/machine_specific/li/filesystem/etc/bind/named.conf.local
index 126da01..5253a12 100644
--- a/machine_specific/li/filesystem/etc/bind/named.conf.local
+++ b/machine_specific/li/filesystem/etc/bind/named.conf.local
@@ -7,14 +7,14 @@
 // ian: ok. uncommented. 1918 zones are private ip ranges.
 include "/etc/bind/zones.rfc1918";
 
-
+# based on random internet tutorials, then reading
+# file:///usr/share/doc/bind9-doc/arm/Bv9ARM.ch06.html#dynamic_update_policies
 zone "b8.nz" {
 type master;
 file "/var/lib/bind/db.b8.nz";
   update-policy {
-    // allow host to update themselves with a key having their own name
-    grant b8.nz. name b8.nz. A TXT;
-    grant b8.nz. name *.b8.nz. A TXT;
+    // allow updating almost anything in the zone or subdomains.
+    grant b8.nz. subdomain b8.nz.;
   };
 };
 include "/etc/bind/key.b8.nz";