scaleway network behavior changed - dns ACL modified

wescale · Jul 17, 2024 · c3f481f · c3f481f
1 parent b307118
commit c3f481f
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/playbooks/14_core_letsencrypt.yml b/playbooks/14_core_letsencrypt.yml
@@ -6,6 +6,7 @@
     acme_nsupdate_key_secret: "{{ hs_dns_key_secret }}"
     acme_nsupdate_host: "{{ edge_public_ipv4 }}"
     acme_account_email: "hostmaster@{{ public_domain }}"
+    acme_nsupdate_delegate_to: localhost
 
 - name: Get generated certificate locally for distribution
   hosts: "hashistack_sre[0]"

diff --git a/roles/infra/templates/scw_one/_group_vars.hashistack_sre.yml.j2 b/roles/infra/templates/scw_one/_group_vars.hashistack_sre.yml.j2
@@ -35,11 +35,13 @@ glxclans_dns_tsig_keys:
 glxclans_dns_views:
   - name: default
     match_clients:
-      - "{{ edge_private_ipv4 }}"
+      - "!127.0.0.1"
+      - "!{{ _private_cidr }}"
+      - "any"
   - name: internal
     match_clients:
-      - "{{ _private_cidr }}"
       - "127.0.0.1"
+      - "{{ _private_cidr }}"
 
 glxclans_dns_zone_domains:
   - name: "consul"