X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=modules%2Fnamed%2Ftemplates%2Fnamed.conf.puppet-shared-keys.erb;h=71cc4132199fe5164b544d2c0bc8607f9e57b766;hb=03fbf64909fd0011aed135a5f31962c247e01be4;hp=e9f7022bbcfead0a00e76482aa57f031f38e4dbd;hpb=3a5787e348233c594b3251979ff2d1717e82d295;p=dsa-puppet.git diff --git a/modules/named/templates/named.conf.puppet-shared-keys.erb b/modules/named/templates/named.conf.puppet-shared-keys.erb index e9f7022b..71cc4132 100644 --- a/modules/named/templates/named.conf.puppet-shared-keys.erb +++ b/modules/named/templates/named.conf.puppet-shared-keys.erb @@ -9,7 +9,8 @@ pairs = [ [ 'denis.debian.org', 'ravel.debian.org' ], [ 'denis.debian.org', 'senfl.debian.org' ], [ 'denis.debian.org', 'diamond.debian.org' ], - [ 'denis.debian.org', 'orff.debian.org' ] + [ 'denis.debian.org', 'orff.debian.org' ], + [ 'denis.debian.org', 'xfr0.easydns.com' ] ] lines = [] @@ -23,9 +24,13 @@ pairs.each do |pair| key = scope.function_hkdf(['/etc/puppet/secret', "puppet-key-#{keyname}"]) - lines << "key #{keyname} { algorithm hmac-md5; secret \"#{key}\"; };" + lines << "key #{keyname} { algorithm hmac-sha256; secret \"#{key}\"; };" - remote_ip = scope.lookupvar('site::allnodeinfo')[other]['ipHostNumber'] + if other == 'xfr0.easydns.com' + remote_ip = '64.68.200.91' + else + remote_ip = scope.lookupvar('site::allnodeinfo')[other]['ipHostNumber'] + end remote_ip.each do |r| lines << "server #{r} { keys { #{keyname}; }; };" end