From 757e746a66c87351f4955516cfb85938a359baf8 Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Thu, 16 Jul 2026 23:10:28 +1000 Subject: [PATCH] bind-internal: allow admin workstation to query the resolver Adds the operator workstation (10.10.12.200, wireguard) to the resolver acl-main.unkin.net so it can use bind-resolvers (198.18.200.7) for recursive lookups. Also lists the router (198.18.21.160) explicitly for documentation; it is already covered by the existing 198.18.21.160/27 and 198.18.21.0/24. --- apps/base/bind-internal/resolvers/acls.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/apps/base/bind-internal/resolvers/acls.yaml b/apps/base/bind-internal/resolvers/acls.yaml index 66b8ad5..c2f8eaa 100644 --- a/apps/base/bind-internal/resolvers/acls.yaml +++ b/apps/base/bind-internal/resolvers/acls.yaml @@ -13,6 +13,9 @@ spec: - 198.18.21.160/27 - 198.18.2.192/27 - 198.18.21.192/27 + # Admin/management access + - 10.10.12.200/32 # benvin workstation (wireguard) + - 198.18.21.160/32 # benvin router (also within 198.18.21.160/27 above) - 198.18.13.0/24 - 198.18.14.0/24 - 198.18.15.0/24