acme_dns_challenge: turn into more generic dyn_dns

Extend the role (previously used for ACME DNS verifications only) to support dynamic DNS functionality planned for sandbox.archlinux.page.

Checks to verify:

• reject unknown zones
• reject unauthorized networks
• reject subdomain records when subdomains == "no"
• reject apex records when subdomains == "only"
• reject non-TSIG requests
• reject unauthorized TSIG key names
• reject disallowed record types

added 1 commit

• 0a268d1f - acme_dns_challenge: turn into more generic dyn_dns

Compare with previous version

added 1 commit

• f9c35d47 - acme_dns_challenge: turn into more generic dyn_dns

Compare with previous version

added 1 commit

• 5ea71f40 - acme_dns_challenge: turn into more generic dyn_dns

Compare with previous version

added 1 commit

• c928cc6c - acme_dns_challenge: turn into more generic dyn_dns

Compare with previous version

added 1 commit

• 6b34957f - acme_dns_challenge: turn into more generic dyn_dns

Compare with previous version

Very nice work!

A single remark and is this atomic when you are both refactoring and adding sandbox at the same time?

added 1 commit

• 472816ab - acme_dns_challenge: turn into more generic dyn_dns

Compare with previous version

resolved all threads

approved this merge request

mentioned in commit 73b219e3

merged