unkin/argocd-apps
2
0
Fork 0
Code Issues 2 Pull Requests 4 Actions Packages Projects Releases Wiki Activity

bind-internal: allow admin workstation to query the resolver (#259)

Browse Source 
## Why
Follow-up to #258 (which added workstation+router to the *authoritative* ACL). The **resolver** (bind-resolvers, 198.18.200.7) has its own `acl-main.unkin.net` gating its `openforwarder` view; the workstation is not in it, so recursive queries return REFUSED. This lets the workstation use the resolver as its normal nameserver.

## Changes
- Add `10.10.12.200/32` (workstation, wireguard) to resolver `acl-main.unkin.net`
- Add `198.18.21.160/32` (router) explicitly for documentation; already covered by existing `198.18.21.160/27` and `198.18.21.0/24` (no functional change for the router)

Reviewed-on: #259
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>
This commit was merged in pull request #259.
This commit is contained in:
Ben Vincent
2026-07-16 23:13:31 +10:00
committed by BenVincent
parent 8f164873e0
commit 197991a6ca
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/base/bind-internal/resolvers/acls.yaml
+3
View File
@@ -13,6 +13,9 @@ spec:
- 198.18.21.160/27 - 198.18.21.160/27
- 198.18.2.192/27 - 198.18.2.192/27
- 198.18.21.192/27 - 198.18.21.192/27
# Admin/management access
- 10.10.12.200/32 # benvin workstation (wireguard)
- 198.18.21.160/32 # benvin router (also within 198.18.21.160/27 above)
- 198.18.13.0/24 - 198.18.13.0/24
- 198.18.14.0/24 - 198.18.14.0/24
- 198.18.15.0/24 - 198.18.15.0/24