From 64f14380c8b3a4176e0113391b3285a86d774431 Mon Sep 17 00:00:00 2001
From: The Hedgehog <me@thehedgehog.me>
Date: Wed, 10 Aug 2022 08:54:30 -0400
Subject: [PATCH] prefect/services/nsd: update dns servers

---
 hosts/prefect/services/nsd/default.nix            | 10 ++++++++++
 hosts/prefect/services/nsd/thehedgehog.me.nix     |  3 ++-
 hosts/prefect/services/nsd/yourmother.website.nix |  3 ++-
 3 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/hosts/prefect/services/nsd/default.nix b/hosts/prefect/services/nsd/default.nix
index 3001e58..b2b5d7d 100644
--- a/hosts/prefect/services/nsd/default.nix
+++ b/hosts/prefect/services/nsd/default.nix
@@ -7,6 +7,10 @@ in {
     interfaces = [
       "0.0.0.0"
     ];
+    # Identify my nameserver
+    identity = "HedgeDNS Authoritative Server";
+    # Fork for extra redundency
+    serverCount = 4;
     zones = {
       "thehedgehog.me" = {
         # Enable DNSSEC for thehedgehog.me
@@ -17,6 +21,9 @@ in {
           "69.65.50.192 NOKEY"
           "2001:1850:1:5:800::6b NOKEY"
         ];
+        notify = [
+          "69.65.50.192 NOKEY"
+        ];
       };
       "yourmother.website" = {
         # Enable DNSSEC for yourmother.website
@@ -27,6 +34,9 @@ in {
           "69.65.50.192 NOKEY"
           "2001:1850:1:5:800::6b NOKEY"
         ];
+        notify = [
+          "69.65.50.192 NOKEY"
+        ];
       };
     };
   };
diff --git a/hosts/prefect/services/nsd/thehedgehog.me.nix b/hosts/prefect/services/nsd/thehedgehog.me.nix
index 889cf5e..c8f60e4 100644
--- a/hosts/prefect/services/nsd/thehedgehog.me.nix
+++ b/hosts/prefect/services/nsd/thehedgehog.me.nix
@@ -2,7 +2,7 @@
   SOA = {
     nameServer = "ns1.thehedgehog.me.";
     adminEmail = "me@thehedgehog.me";
-    serial = 2022070907;
+    serial = 2022071003;
     # Refresh the records every hour
     refresh = 3600;
     # If retry fails, retry after 10 minutes
@@ -12,6 +12,7 @@
   # Set primary nameserver to my nameserver.
   NS = [
     "ns1.thehedgehog.me."
+    "ns2.afraid.org."
   ];
 
   TXT = [
diff --git a/hosts/prefect/services/nsd/yourmother.website.nix b/hosts/prefect/services/nsd/yourmother.website.nix
index dcf3c1a..e0842af 100644
--- a/hosts/prefect/services/nsd/yourmother.website.nix
+++ b/hosts/prefect/services/nsd/yourmother.website.nix
@@ -2,13 +2,14 @@
   SOA = {
     nameServer = "ns1.thehedgehog.me.";
     adminEmail = "me@thehedgehog.me";
-    serial = 2022070903;
+    serial = 2022071003;
   };
 
   CAA = letsEncrypt "me@thehedgehog.me";
 
   NS = [
     "ns1.thehedgehog.me."
+    "ns2.afraid.org."
   ];
 
   A = [ "5.161.140.5" ];