cookie secret

nycmeshnet · Sep 26, 2024 · c75a713 · c75a713
1 parent 4cc0e87
commit c75a713
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 3 deletions.
diff --git a/.github/workflows/deploy_dns_environment.yaml b/.github/workflows/deploy_dns_environment.yaml
@@ -17,6 +17,7 @@ env:
   TF_VAR_mesh_dns_local_password: ${{ secrets.TF_VAR_MESH_DNS_LOCAL_PASSWORD }}
   TF_VAR_influx_db_token: ${{ secrets.TF_VAR_INFLUX_DB_TOKEN }}
   TF_VAR_datadog_api_key: ${{ secrets.TF_VAR_DATADOG_API_KEY }}
+  TF_VAR_dns_cookie_secret: "${{ secrets.TF_VAR_DNS_COOKIE_SECRET }}"
   # Credentials for deployment to AWS
   AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
   AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}

diff --git a/infra/ansible/roles/knot-recursive/templates/kresd.conf.j2 b/infra/ansible/roles/knot-recursive/templates/kresd.conf.j2
@@ -2,9 +2,6 @@
 net.listen('127.0.0.1', 53, { kind = 'dns' })
 net.listen('127.0.0.1', 853, { kind = 'tls' })
 --net.listen('127.0.0.1', 443, { kind = 'doh2' })
---net.listen('::1', 53, { kind = 'dns', freebind = true })
---net.listen('::1', 853, { kind = 'tls', freebind = true })
---net.listen('::1', 443, { kind = 'doh2' })
 net.listen('127.0.0.1', 9100, {kind = 'webmgmt'})
 
 -- INTERNAL_LISTEN_IP