The following is the GNU All-permissive License as recommended in

Copyright (C) 2024 Free Software Foundation

Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. This file is offered as-is, without any warranty.

Contributions are welcome. See

To allow volunteers in the dnsadmin group to alter the bind config:

cd /etc/bind
shopt -s extglob
chown -Rh dnsadmin !(rndc.key)
mv /etc/sudoers.d/dnsadmin.disabled /etc/sudoers.d/dnsadmin

And to remove access:

cd /etc/bind
shopt -s extglob
chown -Rh root !(rndc.key)
mv /etc/sudoers.d/dnsadmin /etc/sudoers.d/dnsadmin.disabled

Note in the post-receive hook, there are some commands that do initial bind setup. Those will fail when volunteers do a git push, but it is safe to ignore them, since bind is already setup. Currently, they are

` cd /var/lib/bind/ mkdir -p masters ln -sf /etc/bind/masters/ masters/ ln -sf /etc/bind/masters/ masters/