# 0sunet.catalog (catalog generator)

# hmac-sha256:knot-ladok:NkiX/2BhxLFO8FPWGp6g0F9uHNvKw0I8GufIFkGOuYM=
key:
  - id: knot-ladok
    algorithm: hmac-sha256
    secret: NkiX/2BhxLFO8FPWGp6g0F9uHNvKw0I8GufIFkGOuYM=

acl:
  - id: txt_ddns_allow
    action: update
    key: knot-ladok
    update-type: [CNAME]
    update-owner: name
    update-owner-name: [ _acme-challenge.*.ladok.se. ]
    update-owner-match: pattern

template:
  - id: 0sunet-catz
    catalog-role: member
    catalog-zone: 0sunet.catalog.
    notify: [ ns1-sunet-se, sunic-node1, sunic-node2, sunic-node3 ]
    storage: "/var/lib/knot/catzones"
    file: "%s.zone"

zone:
  - domain: 0sunet.catalog.
    catalog-role: generate
    notify: [ ns1-sunet-se, sunic-node1, sunic-node2, sunic-node3 ]

  - domain: alternativ.ladok.se.
    template: 0sunet-catz
    acl: [txt_ddns_allow]

  - domain: alt.ladok.se.
    template: 0sunet-catz
    acl: [txt_ddns_allow]