From 3a840b2d0442c15ccd01c8c68253bd7648e326ab Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Thu, 16 Jul 2026 22:51:12 +1000 Subject: [PATCH] bind-internal: allow admin workstation + router to query authoritative Adds two /32 host entries to auth-acl-main so the operator's workstation (10.10.12.200, over wireguard) and router (198.18.21.160) can query the bind-authoritative servers. The router's /24 (198.18.21.0/24) is not in the ACL, so an explicit host entry is required. --- apps/base/bind-internal/authoritative/acls.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/apps/base/bind-internal/authoritative/acls.yaml b/apps/base/bind-internal/authoritative/acls.yaml index d042b2a..009884f 100644 --- a/apps/base/bind-internal/authoritative/acls.yaml +++ b/apps/base/bind-internal/authoritative/acls.yaml @@ -24,3 +24,6 @@ spec: - 198.18.27.0/24 - 198.18.28.0/24 - 198.18.29.0/24 + # Admin/management access (individual hosts, not whole subnets) + - 10.10.12.200/32 # benvin workstation (wireguard) + - 198.18.21.160/32 # benvin router -- 2.47.3