dns:bind: do not add the update-policy if the zone type is secondary (#3873)

This commit is contained in:
Brendan Bank
2024-03-27 09:05:33 +01:00
committed by GitHub
parent cf4fa70cd2
commit b258cab9bd
@@ -180,7 +180,7 @@ zone "{{ domain.domainname }}" {
{% endfor %}
};
{% endif %}
{% if domain.allowrndcupdate is defined and domain.allowrndcupdate == "1" %}
{% if domain.allowrndcupdate is defined and domain.allowrndcupdate == "1" and domain.type != 'secondary' %}
update-policy {
grant rndc-key zonesub ANY;
};