From: Peter van Dijk Date: Tue, 18 Aug 2020 14:16:04 +0000 (+0200) Subject: dnsdist upgrade notes: note new webserver ACL X-Git-Tag: rec-4.4.0-beta1~31^2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e190adae82d0c6acfaf7148c6b5daa1eba0144b5;p=thirdparty%2Fpdns.git dnsdist upgrade notes: note new webserver ACL --- diff --git a/pdns/dnsdistdist/docs/upgrade_guide.rst b/pdns/dnsdistdist/docs/upgrade_guide.rst index 27be26a2d0..0acfcddbff 100644 --- a/pdns/dnsdistdist/docs/upgrade_guide.rst +++ b/pdns/dnsdistdist/docs/upgrade_guide.rst @@ -25,6 +25,8 @@ Packages provided on `the PowerDNS Repository `__ wil This might not be sufficient if the dnsdist configuration refers to files outside of the /etc/dnsdist directory, like DoT or DoH certificates and private keys. Many ACME clients used to get and renew certificates, like CertBot, set permissions assuming that services are started as root. For that particular case, making a copy of the necessary files in the /etc/dnsdist directory is advised, using for example CertBot's ``--deploy-hook`` feature to copy the files with the right permissions after a renewal. +The :func:`webserver` configuration now has an optional ACL parameter, that defaults to "127.0.0.1, ::1". + 1.3.x to 1.4.0 --------------