Try shipping SSO CRL

[dsa-puppet.git] / hieradata / ubcece.yaml

diff --git a/hieradata/ubcece.yaml b/hieradata/ubcece.yaml
index 924b187de96f191df8487822540e429152bcf1e6..d94a4d902cbeddaf2060f4eb84432273f9c3b953 100644 (file)
--- a/hieradata/ubcece.yaml
+++ b/hieradata/ubcece.yaml
@@ -1,10 +1,17 @@
 ---
 nameservers:
-  - 206.12.19.214
-  - 2607:f8f0:610:4000:224:81ff:fea7:e952
-  - 206.12.19.20
-  - 2607:f8f0:610:4000:218:feff:fe76:2ed0
-  - 206.12.19.21
-  - 2607:f8f0:610:4000:21c:c4ff:fee5:e890
+  # ubc-bl2
+  - 206.12.19.212
+  - 2607:f8f0:610:4000:6564:a62:ce0c:13d4
+  # ubc-bl6
+  - 206.12.19.216
+  - 2607:f8f0:610:4000:6564:a62:ce0c:13d8
+  # ubc-bl8
+  - 206.12.19.218
+  - 2607:f8f0:610:4000:224:81ff:fef8:7cb8
 searchpaths:
   - debprivate-ubc.debian.org
+allow_dns_query:
+  - 137.82.84.64/27
+  - 206.12.19.0/24
+  - 2607:f8f0:610:4000::/64