From 4c119f0b80682160d6c9942b2b3f6e5e6e065ac0 Mon Sep 17 00:00:00 2001
From: Simon Bruder <simon@sbruder.de>
Date: Tue, 27 Feb 2024 15:57:04 +0100
Subject: [PATCH] authoritative-dns: Drop INWX secondaries

---
 modules/authoritative-dns.nix | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/modules/authoritative-dns.nix b/modules/authoritative-dns.nix
index fd3ec3a..9556803 100644
--- a/modules/authoritative-dns.nix
+++ b/modules/authoritative-dns.nix
@@ -67,12 +67,7 @@ in
               id = host;
               address = hostAddresses;
             })
-            addresses) ++ lib.optional isPrimaryHost {
-            id = "inwx";
-            # INWX only allows the specification of one primary DNS,
-            # which limits the IP protocol usable for zone transfers to one.
-            address = lib.singleton "185.181.104.96";
-          };
+            addresses);
         }
         (lib.mkIf isPrimaryHost {
           policy = lib.singleton {
@@ -90,7 +85,7 @@ in
               zonefile-load = "difference-no-serial";
               journal-content = "all";
               # secondary
-              notify = [ "inwx" ] ++ secondaryHosts;
+              notify = secondaryHosts;
               # dnssec
               dnssec-signing = true;
               dnssec-policy = "default";