surtr: dns: forbid http-01

author: Gregor Kleen <gkleen@yggdrasil.li> 2022-02-22 17:25:38 +0100
committer: Gregor Kleen <gkleen@yggdrasil.li> 2022-02-22 17:25:38 +0100
commit: 69bec7cbea3a19d8cf1818d0dc027ae636e017db (patch)
tree: a6d765dce201472ae4ce1b4be6c6f3bbf01376f5
parent: a7e90be7fef0a75615239c2d7ccbd323239bf127 (diff)
download: nixos-69bec7cbea3a19d8cf1818d0dc027ae636e017db.tar
nixos-69bec7cbea3a19d8cf1818d0dc027ae636e017db.tar.gz
nixos-69bec7cbea3a19d8cf1818d0dc027ae636e017db.tar.bz2
nixos-69bec7cbea3a19d8cf1818d0dc027ae636e017db.tar.xz
nixos-69bec7cbea3a19d8cf1818d0dc027ae636e017db.zip
8 files changed, 16 insertions, 16 deletions
diff --git a/hosts/surtr/dns/zones/email.nights.soa b/hosts/surtr/dns/zones/email.nights.soa
index 84ea61cc..99421165 100644
--- a/hosts/surtr/dns/zones/email.nights.soa
+++ b/hosts/surtr/dns/zones/email.nights.soa
@@ -1,7 +1,7 @@
 $ORIGIN nights.email.
 $TTL 3600
 @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
-  2022022200 ; serial
+  2022022201 ; serial
  10800      ; refresh
  3600       ; retry
  604800     ; expire
@@ -12,7 +12,7 @@ $TTL 3600
                        IN      NS      ns2.inwx.de.
                        IN      NS      ns3.inwx.eu.
-@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01,http-01"
+@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01"
 @                       IN      CAA     128 iodef "mailto:caa@yggdrasil.li"
 @                       IN      A       188.68.51.254
diff --git a/hosts/surtr/dns/zones/li.141.soa b/hosts/surtr/dns/zones/li.141.soa
index 9419a4ad..bc00042b 100644
--- a/hosts/surtr/dns/zones/li.141.soa
+++ b/hosts/surtr/dns/zones/li.141.soa
@@ -1,7 +1,7 @@
 $ORIGIN 141.li.
 $TTL 3600
 @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
-  2022022201 ; serial
+  2022022202 ; serial
  10800      ; refresh
  3600       ; retry
  604800     ; expire
@@ -12,7 +12,7 @@ $TTL 3600
                        IN      NS      ns2.inwx.de.
                        IN      NS      ns3.inwx.eu.
-@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01,http-01"
+@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01"
 @                       IN      CAA     128 iodef "mailto:caa@yggdrasil.li"
 @                       IN      A       188.68.51.254
diff --git a/hosts/surtr/dns/zones/li.kleen.soa b/hosts/surtr/dns/zones/li.kleen.soa
index 2e6326a4..8a62e5c0 100644
--- a/hosts/surtr/dns/zones/li.kleen.soa
+++ b/hosts/surtr/dns/zones/li.kleen.soa
@@ -1,7 +1,7 @@
 $ORIGIN kleen.li.
 $TTL 3600
 @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
-  2022022200 ; serial
+  2022022201 ; serial
  10800      ; refresh
  3600       ; retry
  604800     ; expire
@@ -12,7 +12,7 @@ $TTL 3600
                        IN      NS      ns2.inwx.de.
                        IN      NS      ns3.inwx.eu.
-@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01,http-01"
+@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01"
 @                       IN      CAA     128 iodef "mailto:caa@yggdrasil.li"
 @                       IN      A       188.68.51.254
diff --git a/hosts/surtr/dns/zones/li.xmpp.soa b/hosts/surtr/dns/zones/li.xmpp.soa
index 7a10c957..82cd8464 100644
--- a/hosts/surtr/dns/zones/li.xmpp.soa
+++ b/hosts/surtr/dns/zones/li.xmpp.soa
@@ -1,7 +1,7 @@
 $ORIGIN xmpp.li.
 $TTL 3600
 @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
-  2022022200 ; serial
+  2022022201 ; serial
  10800      ; refresh
  3600       ; retry
  604800     ; expire
@@ -12,7 +12,7 @@ $TTL 3600
                        IN      NS      ns2.inwx.de.
                        IN      NS      ns3.inwx.eu.
-@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01,http-01"
+@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01"
 @                       IN      CAA     128 iodef "mailto:caa@yggdrasil.li"
 @                       IN      A       188.68.51.254
diff --git a/hosts/surtr/dns/zones/li.yggdrasil.soa b/hosts/surtr/dns/zones/li.yggdrasil.soa
index 8fbfd98f..ff623211 100644
--- a/hosts/surtr/dns/zones/li.yggdrasil.soa
+++ b/hosts/surtr/dns/zones/li.yggdrasil.soa
@@ -1,7 +1,7 @@
 $ORIGIN yggdrasil.li.
 $TTL 3600
 @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
-  2022022200 ; serial
+  2022022201 ; serial
  10800      ; refresh
  3600       ; retry
  604800     ; expire
@@ -12,7 +12,7 @@ $TTL 3600
                        IN      NS      ns2.inwx.de.
                        IN      NS      ns3.inwx.eu.
-@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01,http-01"
+@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01"
 @                       IN      CAA     128 iodef "mailto:caa@yggdrasil.li"
 ns                      IN      A       202.61.241.61
diff --git a/hosts/surtr/dns/zones/org.dirty-haskell.soa b/hosts/surtr/dns/zones/org.dirty-haskell.soa
index 558d9817..dcdb2fa1 100644
--- a/hosts/surtr/dns/zones/org.dirty-haskell.soa
+++ b/hosts/surtr/dns/zones/org.dirty-haskell.soa
@@ -1,7 +1,7 @@
 $ORIGIN dirty-haskell.org.
 $TTL 3600
 @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
-  2022022200 ; serial
+  2022022201 ; serial
  10800      ; refresh
  3600       ; retry
  604800     ; expire
@@ -12,7 +12,7 @@ $TTL 3600
                        IN      NS      ns2.inwx.de.
                        IN      NS      ns3.inwx.eu.
-@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01,http-01"
+@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01"
 @                       IN      CAA     128 iodef "mailto:caa@yggdrasil.li"
 @                       IN      A       188.68.51.254
diff --git a/hosts/surtr/dns/zones/org.praseodym.soa b/hosts/surtr/dns/zones/org.praseodym.soa
index 08f5d16d..471b0c0c 100644
--- a/hosts/surtr/dns/zones/org.praseodym.soa
+++ b/hosts/surtr/dns/zones/org.praseodym.soa
@@ -1,7 +1,7 @@
 $ORIGIN praseodym.org.
 $TTL 3600
 @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
-  2022022200 ; serial
+  2022022201 ; serial
  10800      ; refresh
  3600       ; retry
  604800     ; expire
@@ -12,7 +12,7 @@ $TTL 3600
                        IN      NS      ns2.inwx.de.
                        IN      NS      ns3.inwx.eu.
-@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01,http-01"
+@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01"
 @                       IN      CAA     128 iodef "mailto:caa@yggdrasil.li"
 @                       IN      A       188.68.51.254
diff --git a/hosts/surtr/dns/zones/org.rheperire.soa b/hosts/surtr/dns/zones/org.rheperire.soa
index 09be66b5..178693a2 100644
--- a/hosts/surtr/dns/zones/org.rheperire.soa
+++ b/hosts/surtr/dns/zones/org.rheperire.soa
@@ -1,7 +1,7 @@
 $ORIGIN rheperire.org.
 $TTL 3600
 @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
-  2022022206 ; serial
+  2022022207 ; serial
  10800      ; refresh
  3600       ; retry
  604800     ; expire
@@ -12,7 +12,7 @@ $TTL 3600
                        IN      NS      ns2.inwx.de.
                        IN      NS      ns3.inwx.eu.
-@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01,http-01"
+@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01"
 @                       IN      CAA     128 iodef "mailto:caa@yggdrasil.li"
 @                       IN      A       188.68.51.254
author	Gregor Kleen <gkleen@yggdrasil.li>	2022-02-22 17:25:38 +0100
committer	Gregor Kleen <gkleen@yggdrasil.li>	2022-02-22 17:25:38 +0100
commit	69bec7cbea3a19d8cf1818d0dc027ae636e017db (patch)
tree	a6d765dce201472ae4ce1b4be6c6f3bbf01376f5
parent	a7e90be7fef0a75615239c2d7ccbd323239bf127 (diff)
download	nixos-69bec7cbea3a19d8cf1818d0dc027ae636e017db.tar nixos-69bec7cbea3a19d8cf1818d0dc027ae636e017db.tar.gz nixos-69bec7cbea3a19d8cf1818d0dc027ae636e017db.tar.bz2 nixos-69bec7cbea3a19d8cf1818d0dc027ae636e017db.tar.xz nixos-69bec7cbea3a19d8cf1818d0dc027ae636e017db.zip

diff --git a/hosts/surtr/dns/zones/email.nights.soa b/hosts/surtr/dns/zones/email.nights.soa index 84ea61cc..99421165 100644 --- a/hosts/surtr/dns/zones/email.nights.soa +++ b/hosts/surtr/dns/zones/email.nights.soa
@@ -1,7 +1,7 @@
1	$ORIGIN nights.email.	1	$ORIGIN nights.email.
2	$TTL 3600	2	$TTL 3600
3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (	3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
4	2022022200 ; serial	4	2022022201 ; serial
5	10800 ; refresh	5	10800 ; refresh
6	3600 ; retry	6	3600 ; retry
7	604800 ; expire	7	604800 ; expire
@@ -12,7 +12,7 @@ $TTL 3600
12	IN NS ns2.inwx.de.	12	IN NS ns2.inwx.de.
13	IN NS ns3.inwx.eu.	13	IN NS ns3.inwx.eu.
14		14
15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01,http-01"	15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01"
16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"	16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"
17		17
18	@ IN A 188.68.51.254	18	@ IN A 188.68.51.254


diff --git a/hosts/surtr/dns/zones/li.141.soa b/hosts/surtr/dns/zones/li.141.soa index 9419a4ad..bc00042b 100644 --- a/hosts/surtr/dns/zones/li.141.soa +++ b/hosts/surtr/dns/zones/li.141.soa
@@ -1,7 +1,7 @@
1	$ORIGIN 141.li.	1	$ORIGIN 141.li.
2	$TTL 3600	2	$TTL 3600
3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (	3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
4	2022022201 ; serial	4	2022022202 ; serial
5	10800 ; refresh	5	10800 ; refresh
6	3600 ; retry	6	3600 ; retry
7	604800 ; expire	7	604800 ; expire
@@ -12,7 +12,7 @@ $TTL 3600
12	IN NS ns2.inwx.de.	12	IN NS ns2.inwx.de.
13	IN NS ns3.inwx.eu.	13	IN NS ns3.inwx.eu.
14		14
15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01,http-01"	15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01"
16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"	16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"
17		17
18	@ IN A 188.68.51.254	18	@ IN A 188.68.51.254


diff --git a/hosts/surtr/dns/zones/li.kleen.soa b/hosts/surtr/dns/zones/li.kleen.soa index 2e6326a4..8a62e5c0 100644 --- a/hosts/surtr/dns/zones/li.kleen.soa +++ b/hosts/surtr/dns/zones/li.kleen.soa
@@ -1,7 +1,7 @@
1	$ORIGIN kleen.li.	1	$ORIGIN kleen.li.
2	$TTL 3600	2	$TTL 3600
3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (	3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
4	2022022200 ; serial	4	2022022201 ; serial
5	10800 ; refresh	5	10800 ; refresh
6	3600 ; retry	6	3600 ; retry
7	604800 ; expire	7	604800 ; expire
@@ -12,7 +12,7 @@ $TTL 3600
12	IN NS ns2.inwx.de.	12	IN NS ns2.inwx.de.
13	IN NS ns3.inwx.eu.	13	IN NS ns3.inwx.eu.
14		14
15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01,http-01"	15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01"
16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"	16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"
17		17
18	@ IN A 188.68.51.254	18	@ IN A 188.68.51.254


diff --git a/hosts/surtr/dns/zones/li.xmpp.soa b/hosts/surtr/dns/zones/li.xmpp.soa index 7a10c957..82cd8464 100644 --- a/hosts/surtr/dns/zones/li.xmpp.soa +++ b/hosts/surtr/dns/zones/li.xmpp.soa
@@ -1,7 +1,7 @@
1	$ORIGIN xmpp.li.	1	$ORIGIN xmpp.li.
2	$TTL 3600	2	$TTL 3600
3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (	3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
4	2022022200 ; serial	4	2022022201 ; serial
5	10800 ; refresh	5	10800 ; refresh
6	3600 ; retry	6	3600 ; retry
7	604800 ; expire	7	604800 ; expire
@@ -12,7 +12,7 @@ $TTL 3600
12	IN NS ns2.inwx.de.	12	IN NS ns2.inwx.de.
13	IN NS ns3.inwx.eu.	13	IN NS ns3.inwx.eu.
14		14
15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01,http-01"	15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01"
16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"	16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"
17		17
18	@ IN A 188.68.51.254	18	@ IN A 188.68.51.254


diff --git a/hosts/surtr/dns/zones/li.yggdrasil.soa b/hosts/surtr/dns/zones/li.yggdrasil.soa index 8fbfd98f..ff623211 100644 --- a/hosts/surtr/dns/zones/li.yggdrasil.soa +++ b/hosts/surtr/dns/zones/li.yggdrasil.soa
@@ -1,7 +1,7 @@
1	$ORIGIN yggdrasil.li.	1	$ORIGIN yggdrasil.li.
2	$TTL 3600	2	$TTL 3600
3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (	3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
4	2022022200 ; serial	4	2022022201 ; serial
5	10800 ; refresh	5	10800 ; refresh
6	3600 ; retry	6	3600 ; retry
7	604800 ; expire	7	604800 ; expire
@@ -12,7 +12,7 @@ $TTL 3600
12	IN NS ns2.inwx.de.	12	IN NS ns2.inwx.de.
13	IN NS ns3.inwx.eu.	13	IN NS ns3.inwx.eu.
14		14
15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01,http-01"	15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01"
16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"	16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"
17		17
18	ns IN A 202.61.241.61	18	ns IN A 202.61.241.61


diff --git a/hosts/surtr/dns/zones/org.dirty-haskell.soa b/hosts/surtr/dns/zones/org.dirty-haskell.soa index 558d9817..dcdb2fa1 100644 --- a/hosts/surtr/dns/zones/org.dirty-haskell.soa +++ b/hosts/surtr/dns/zones/org.dirty-haskell.soa
@@ -1,7 +1,7 @@
1	$ORIGIN dirty-haskell.org.	1	$ORIGIN dirty-haskell.org.
2	$TTL 3600	2	$TTL 3600
3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (	3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
4	2022022200 ; serial	4	2022022201 ; serial
5	10800 ; refresh	5	10800 ; refresh
6	3600 ; retry	6	3600 ; retry
7	604800 ; expire	7	604800 ; expire
@@ -12,7 +12,7 @@ $TTL 3600
12	IN NS ns2.inwx.de.	12	IN NS ns2.inwx.de.
13	IN NS ns3.inwx.eu.	13	IN NS ns3.inwx.eu.
14		14
15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01,http-01"	15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01"
16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"	16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"
17		17
18	@ IN A 188.68.51.254	18	@ IN A 188.68.51.254


diff --git a/hosts/surtr/dns/zones/org.praseodym.soa b/hosts/surtr/dns/zones/org.praseodym.soa index 08f5d16d..471b0c0c 100644 --- a/hosts/surtr/dns/zones/org.praseodym.soa +++ b/hosts/surtr/dns/zones/org.praseodym.soa
@@ -1,7 +1,7 @@
1	$ORIGIN praseodym.org.	1	$ORIGIN praseodym.org.
2	$TTL 3600	2	$TTL 3600
3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (	3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
4	2022022200 ; serial	4	2022022201 ; serial
5	10800 ; refresh	5	10800 ; refresh
6	3600 ; retry	6	3600 ; retry
7	604800 ; expire	7	604800 ; expire
@@ -12,7 +12,7 @@ $TTL 3600
12	IN NS ns2.inwx.de.	12	IN NS ns2.inwx.de.
13	IN NS ns3.inwx.eu.	13	IN NS ns3.inwx.eu.
14		14
15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01,http-01"	15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01"
16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"	16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"
17		17
18	@ IN A 188.68.51.254	18	@ IN A 188.68.51.254


diff --git a/hosts/surtr/dns/zones/org.rheperire.soa b/hosts/surtr/dns/zones/org.rheperire.soa index 09be66b5..178693a2 100644 --- a/hosts/surtr/dns/zones/org.rheperire.soa +++ b/hosts/surtr/dns/zones/org.rheperire.soa
@@ -1,7 +1,7 @@
1	$ORIGIN rheperire.org.	1	$ORIGIN rheperire.org.
2	$TTL 3600	2	$TTL 3600
3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (	3	@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
4	2022022206 ; serial	4	2022022207 ; serial
5	10800 ; refresh	5	10800 ; refresh
6	3600 ; retry	6	3600 ; retry
7	604800 ; expire	7	604800 ; expire
@@ -12,7 +12,7 @@ $TTL 3600
12	IN NS ns2.inwx.de.	12	IN NS ns2.inwx.de.
13	IN NS ns3.inwx.eu.	13	IN NS ns3.inwx.eu.
14		14
15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01,http-01"	15	@ IN CAA 128 issue "letsencrypt.org; validationmethods=dns-01"
16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"	16	@ IN CAA 128 iodef "mailto:caa@yggdrasil.li"
17		17
18	@ IN A 188.68.51.254	18	@ IN A 188.68.51.254