Merge pull request #71 from systemli/fix/no_secrets_in_config

Don't put content of private update key in named.conf.options
systemli · Jun 16, 2023 · 60e062b · 60e062b
2 parents 01c76bb + 2cf41d4
commit 60e062b
Showing 1 changed file with 0 additions and 11 deletions.
diff --git a/templates/bind/named.conf.options.j2 b/templates/bind/named.conf.options.j2
@@ -72,17 +72,6 @@ key "{{ zone.name }}_ddns_update" {
 {%   endfor %}
 {% endif %}
 
-{% if bind9_zones_static|selectattr('update_keyfile','defined')|list|default() %}
-{%   for zone in bind9_zones_static|selectattr('update_keyfile','defined')|list|default([]) %}
-{%     if zone_type|default(bind9_zone_type|default('master')) == 'master' %}
-{%       if loop.first %}
-// The following keys are used for dynamic DNS updates
-{%       endif %}
-{{ lookup('file', 'bind/zones/'+zone.update_keyfile+'.private') }}
-{%     endif %}
-{%   endfor %}
-{% endif %}
-
 acl our_networks {
 	// Permitted for queries
 {% if bind9_our_networks|default() %}