Avoid single point-of-failure for our GeoIP domain

We don't want mirror.pkgbuild.com's DNS server to be a single-point-of-failure, so this commit adds multiple authoritative DNS servers for the zone. The extra DNS servers are run on the geomirror servers.

The _acme-challenge zone, used for obtaining certificates, is run solely on mirror.pkgbuild.com's DNS server, to avoid syncing DNS records between the servers (KISS).

added 2 commits

• 7fcc9471 - Avoid single point-of-failure for our GeoIP domain
• 7b679a33 - geomirror: Add missing "open firewall hole" task

Compare with previous version

approved this merge request

resolved all threads

added 4 commits

• 7b679a33...a8720364 - 2 commits from branch archlinux:master
• aa359082 - Avoid single point-of-failure for our GeoIP domain
• 93c8a172 - geomirror: Add missing "open firewall hole" task

Compare with previous version

mentioned in commit 0661ade0

merged