From e7aca653292defd2f0e06961cb0c3bf78e47a979 Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Sun, 7 Jul 2019 12:01:30 +0200
Subject: [PATCH] Fetch openpgpkey zone to denis

---
 modules/named/manifests/primary.pp | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/modules/named/manifests/primary.pp b/modules/named/manifests/primary.pp
index 7b79ce42e..64fc3489e 100644
--- a/modules/named/manifests/primary.pp
+++ b/modules/named/manifests/primary.pp
@@ -20,4 +20,23 @@ class named::primary inherits named::authoritative {
 		content => template('named/named.conf.external-secondaries-ACLs.erb'),
 	}
 
+	concat::fragment { 'dsa-named-conf-puppet-misc---openpgpkey-zone':
+		target => '/etc/bind/named.conf.puppet-misc',
+		order  => '020',
+		content  => @("EOF"),
+			zone "_openpgpkey.debian.org" {
+				type slave;
+				file "db._openpgpkey.debian.org";
+				allow-query { any; };
+				allow-transfer {
+					127.0.0.1;
+					rcode0-ACL;
+					dnsnode-ACL;
+					dnsnodeapi-ACL;
+				};
+				also-notify {
+				};
+			};
+			| EOF
+	}
 }
-- 
2.20.1