From e190adae82d0c6acfaf7148c6b5daa1eba0144b5 Mon Sep 17 00:00:00 2001 From: Peter van Dijk Date: Tue, 18 Aug 2020 16:16:04 +0200 Subject: [PATCH] dnsdist upgrade notes: note new webserver ACL --- pdns/dnsdistdist/docs/upgrade_guide.rst | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pdns/dnsdistdist/docs/upgrade_guide.rst b/pdns/dnsdistdist/docs/upgrade_guide.rst index 27be26a2d0..0acfcddbff 100644 --- a/pdns/dnsdistdist/docs/upgrade_guide.rst +++ b/pdns/dnsdistdist/docs/upgrade_guide.rst @@ -25,6 +25,8 @@ Packages provided on `the PowerDNS Repository `__ wil This might not be sufficient if the dnsdist configuration refers to files outside of the /etc/dnsdist directory, like DoT or DoH certificates and private keys. Many ACME clients used to get and renew certificates, like CertBot, set permissions assuming that services are started as root. For that particular case, making a copy of the necessary files in the /etc/dnsdist directory is advised, using for example CertBot's ``--deploy-hook`` feature to copy the files with the right permissions after a renewal. +The :func:`webserver` configuration now has an optional ACL parameter, that defaults to "127.0.0.1, ::1". + 1.3.x to 1.4.0 -------------- -- 2.47.2