Service/Nameservers: Difference between revisions

No edit summary
No edit summary
Line 77: Line 77:


The script does:
The script does:
  * re-sign the zone with the DNSSEC keys
* bump the serial number
  * re-sign the zone with the DNSSEC private keys (which you must copy to keys/)
  * commit your changes
  * commit your changes
  * push the commit to the remote repository
  * push the commit to the remote repository


The post-receive hook to automate the rest of the procedure:
The post-receive hook automates the rest of the procedure:
  * send a notification email to systems-logs@;
  * send a notification email to systems-logs@
  * checkout your changes to the bind configuration directory;
  * checkout your changes to the bind configuration directory
  * make BIND reload its configuration;
  * make BIND reload its configuration
  * watch BIND's log file to ensure slaves are actually transferring the changed zones.
  * watch BIND's log file to ensure there are no errors and slaves are actually transferring the changed zones


== Implementation details ==
== Implementation details ==