modified

production/bind9/bind/command.sh

@@ -5,6 +5,7 @@
 # opendkim-genkey -b 2048 -h rsa-sha256 -r -s dkim -d hatthieves.es -v
 DOMAIN="hatthieves.es"
 DOMAIN2="hatthieves.com"
+DOMAIN3="hatthieves.co"
 IP=82.223.3.135
 IPV6=2001:ba0:1800:80e0::1
 DKIM=$(sed -e 's/"/\"/g' /etc/bind/dkim.txt)
@@ -115,6 +116,15 @@ zone \"$DOMAIN2\" {
      };
 };
 
+zone \"$DOMAIN3\" {
+     type master;
+     file \"/etc/bind/$DOMAIN3.signed\";
+     allow-update {
+       key \"$DOMAIN3.\";
+       key \"_acme-challenge.$DOMAIN3.\";
+     };
+};
+
 zone \"$(ipv6calc -q -a $IP | sed -e 's/^[[:digit:]]\+\.//' -e 's/\.$//')\" {
      type master;
      file \"/etc/bind/rev.$(ipv6calc -q -a $IP | sed -e 's/^[[:digit:]]\+\.//' -e 's/\.$//')\";
@@ -186,6 +196,11 @@ key \"_acme-challenge.$DOMAIN.\" {
 key \"_acme-challenge.$DOMAIN2.\" {
         algorithm hmac-sha512;
         secret \"JlCDMOnkKuNHSiDi6GnxurCwGpnw85NngKogSqKjSU+cvb8RJSQEZekkfW88hZIPUf0cY+Td9c2SttUL05xQEw==\";
+};
+
+key \"_acme-challenge.$DOMAIN3.\" {
+        algorithm hmac-sha512;
+        secret \"Au4vHdNujqmk9p77UvMIYydOgj4vFCioan7RFBprqtepjohr9eVFN6wMcvYR3HKFLWv0ZW7YZoFZmHFKtiaUKA==\";
 };"> /etc/bind/named.conf.options
 echo -e ";
 ; BIND data for $DOMAIN2
@@ -212,6 +227,31 @@ $DKIM2
 \$INCLUDE K$DOMAIN2.+008+61170.key
 \$INCLUDE K$DOMAIN2.+008+28449.key
 \$INCLUDE K_acme-challenge.$DOMAIN2.+165+29132.key"> /etc/bind/$DOMAIN2
+echo -e ";
+; BIND data for $DOMAIN3
+;
+\$TTL 3h
+@       IN      SOA     ns1.$DOMAIN3. admin.$DOMAIN3. (
+                        $(date +%Y%m%d)$(cat /etc/bind/version) ; SERIAL
+                        3h      ; Refresh
+                        1h      ; Retry
+                        1w      ; Expire
+                        1h )    ; Minimum
+;
+@       IN      NS      ns1.$DOMAIN.
+@       IN      NS      ns2.$DOMAIN.
+
+$DOMAIN3.       IN      A       $IP
+$DOMAIN3.       IN      AAAA    $IPV6
+*                       IN      CNAME   $DOMAIN3.
+$DOMAIN3.        IN      MX      10     mail.$DOMAIN3.
+$DOMAIN3.        IN      TXT     \"v=spf1 ip4:172.200.0.0/24 a mx -all\"
+_dmarc                  IN      TXT     \"v=DMARC1;p=reject;rua=mailto:postmaster@$DOMAIN;pct=100;ruf=mailto:postmaster@$DOMAIN;sp=reject;aspf=s;adkim=s;ri=86400;fo=0;rf=afrf\"
+$DKIM3
+
+\$INCLUDE K$DOMAIN3.+008+03409.key
+\$INCLUDE K$DOMAIN3.+008+09300.key
+\$INCLUDE K_acme-challenge.$DOMAIN3.+165+22537.key"> /etc/bind/$DOMAIN3
 COUNT=$(echo $(cat /etc/bind/version)"+1" | bc)
 echo $COUNT > /etc/bind/version
 mkdir /run/named
@@ -220,4 +260,5 @@ chown 101.101 -R /run/named
 cd /etc/bind
 dnssec-signzone -A -3 $(head -c 1000 /dev/urandom | sha1sum | cut -b 1-16) -N INCREMENT $DOMAIN
 dnssec-signzone -P -A -3 $(head -c 1000 /dev/urandom | sha1sum | cut -b 1-16) -N INCREMENT $DOMAIN2
+dnssec-signzone -P -A -3 $(head -c 1000 /dev/urandom | sha1sum | cut -b 1-16) -N INCREMENT $DOMAIN3
 named -c named.conf -g -u bind