move allow_dns_query into hiera

[dsa-puppet.git] / hieradata / ubcece.yaml

diff --git a/hieradata/ubcece.yaml b/hieradata/ubcece.yaml
index 924b187de96f191df8487822540e429152bcf1e6..96a5f37ed00b3e4f3fbf085a93229c59c61cf4f8 100644 (file)
--- a/hieradata/ubcece.yaml
+++ b/hieradata/ubcece.yaml
@@ -8,3 +8,7 @@ nameservers:
   - 2607:f8f0:610:4000:21c:c4ff:fee5:e890
 searchpaths:
   - debprivate-ubc.debian.org
+allow_dns_query:
+  - 137.82.84.64/27
+  - 206.12.19.0/24
+  - 2607:f8f0:610:4000::/64