acme@surtr: ...

2 files changed, 4 insertions, 4 deletions

diff --git a/hosts/surtr/dns/zones/org.rheperire.soa b/hosts/surtr/dns/zones/org.rheperire.soa
index b36b7b6d..7b6b6988 100644
--- a/hosts/surtr/dns/zones/org.rheperire.soa
+++ b/hosts/surtr/dns/zones/org.rheperire.soa
@@ -1,7 +1,7 @@
 $ORIGIN rheperire.org.
 $TTL 3600
 @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
-  2021053007 ; serial
+  2021053008 ; serial
   10800      ; refresh
   3600       ; retry
   604800     ; expire
@@ -25,4 +25,4 @@ $TTL 3600
 _acme-challenge         IN      A       188.68.51.254
 _acme-challenge         IN      AAAA    2a03:4000:6:d004::
 _acme-challenge         IN      MX      0 ymir.yggdrasil.li.
-_acme-challenge      60 IN      TXT     "v=spf1 redirect=yggdrasil.li"
+_acme-challenge      30 IN      TXT     "v=spf1 redirect=yggdrasil.li"
diff --git a/hosts/surtr/tls.nix b/hosts/surtr/tls.nix
index 259202bb..d087c9f5 100644
--- a/hosts/surtr/tls.nix
+++ b/hosts/surtr/tls.nix
@@ -5,7 +5,7 @@ let
   knotDNSCredentials = zone: pkgs.writeText "lego-credentials" ''
     EXEC_PATH=${knotDNSExec zone}/bin/update-dns.sh
     EXEC_PROPAGATION_TIMEOUT=60
-    EXEC_POLLING_INTERVAL=10
+    EXEC_POLLING_INTERVAL=5
   '';
   knotDNSExec = zone: pkgs.writeScriptBin "update-dns.sh" ''
     #!${pkgs.zsh}/bin/zsh -xe
@@ -20,7 +20,7 @@ let
 
     case "''${mode}" in
       present)
-        ${knotCfg.cliWrappers}/bin/knotc zone-set ${zone} "''${owner}" 60 TXT "''${challenge}"
+        ${knotCfg.cliWrappers}/bin/knotc zone-set ${zone} "''${owner}" 30 TXT "''${challenge}"
         ;;
       cleanup)
         ${knotCfg.cliWrappers}/bin/knotc zone-unset ${zone} "''${owner}" TXT "''${challenge}"