move allow_dns_query into hiera

[dsa-puppet.git] / hieradata / sil.yaml

diff --git a/hieradata/sil.yaml b/hieradata/sil.yaml
index 03bf7febafd99ff4ae43df4b7c3005b39846a692..42e66dcbe2a81460019213d0c2b8513baf42621a 100644 (file)
--- a/hieradata/sil.yaml
+++ b/hieradata/sil.yaml
@@ -4,3 +4,6 @@ nameservers:
   - 86.59.118.148
 searchpaths:
   - debprivate-sil.debian.org
+allow_dns_query:
+  - 86.59.118.144/28
+  - 2001:858:2:2::/64