Differences

This shows you the differences between two versions of the page.

--- tips:dns [2019/05/02 08:37] – [reverse] scipio
+++ tips:dns [2021/09/30 12:10] (current) – scipio
@@ Line 1: / Line 1: @@
 ====== DNS ======
+===== certbot integration =====
+  * https://wiki.archlinux.org/title/Certbot#Configure_BIND_for_rfc2136
+generate tsig key
+<code>
+tsig-keygen -a HMAC-SHA512 galileo-tsig-key
+</code>
+enable rfc2136 updates on domain in /etc/bind/named.conf.local
+<code>
+zone "nawigare.it" {
+    ......
+    // this is for certbot
+    check-names warn;
+    update-policy {
+        grant galileo-tsig-key name _acme-challenge.nawigare.it. txt;
+        };
+    };
+</code>
 ===== galileo =====

Galileo Labs