dns: fix CAA recommended DNS conf -> 0 is apparently a more sensible value than 128...

This commit is contained in:
Alexandre Aubin 2023-02-07 12:17:28 +01:00
parent 00b411d18d
commit 2eb7da0603

View file

@ -138,7 +138,7 @@ def _build_dns_conf(base_domain, include_empty_AAAA_if_no_ipv6=False):
{"type": "A", "name": "*", "value": "123.123.123.123", "ttl": 3600}, {"type": "A", "name": "*", "value": "123.123.123.123", "ttl": 3600},
# if ipv6 available # if ipv6 available
{"type": "AAAA", "name": "*", "value": "valid-ipv6", "ttl": 3600}, {"type": "AAAA", "name": "*", "value": "valid-ipv6", "ttl": 3600},
{"type": "CAA", "name": "@", "value": "128 issue \"letsencrypt.org\"", "ttl": 3600}, {"type": "CAA", "name": "@", "value": "0 issue \"letsencrypt.org\"", "ttl": 3600},
], ],
"example_of_a_custom_rule": [ "example_of_a_custom_rule": [
{"type": "SRV", "name": "_matrix", "value": "domain.tld.", "ttl": 3600} {"type": "SRV", "name": "_matrix", "value": "domain.tld.", "ttl": 3600}
@ -248,7 +248,7 @@ def _build_dns_conf(base_domain, include_empty_AAAA_if_no_ipv6=False):
elif include_empty_AAAA_if_no_ipv6: elif include_empty_AAAA_if_no_ipv6:
extra.append([f"*{suffix}", ttl, "AAAA", None]) extra.append([f"*{suffix}", ttl, "AAAA", None])
extra.append([basename, ttl, "CAA", '128 issue "letsencrypt.org"']) extra.append([basename, ttl, "CAA", '0 issue "letsencrypt.org"'])
#################### ####################
# Standard records # # Standard records #