# how to update DNS resource records

## updating standard resource records

For most zones, the hidden primary DNS server is denis, with ravel, senfl,
klecker and orff being the public-facing secondary DNS servers.

Zone files are managed via a [git repository][1].  Pushing commits into the git
repository will invoke a post-commit hook that causes the recompilation and
reload of the zone files.

Some subdomains (specifically www.debian.org and security.debian.org) are
served by the autodns/geodns setup on geo{1,2,3}.  Their zone files are managed
by a separate [git repository][2].

## updating DNSSEC records

TODO

[1]: ssh://git@ubergit.debian.org/dsa/domains
[2]: ssh://git@ubergit.debian.org/dsa/auto-dns