unbound: Use correct certs for dna-gw hosts

This commit is contained in:
Timo Makinen 2025-06-18 16:45:53 +00:00
parent f197409c5d
commit c07a0fbd92

View file

@ -15,8 +15,8 @@ server:
interface: {{ intnet_prefix }}.12@53
interface: {{ intnet_prefix }}.12@853
tls-service-key: {{ tls_private }}/dns.home.foo.sh.key
tls-service-pem: {{ tls_certs }}/dns.home.foo.sh.crt
tls-service-key: {{ tls_private }}/dns.{{ inventory_hostname.split('.')[1] }}.foo.sh.key
tls-service-pem: {{ tls_certs }}/dns.{{ inventory_hostname.split('.')[1] }}.foo.sh.crt
tls-cert-bundle: {{ tls_bundle }}
access-control: 127.0.0.0/8 allow