how to update DNS resource records

updating standard resource records

For most zones, the hidden primary DNS server is denis, with ravel, klecker and orff being the public-facing secondary DNS servers.

Zone files are managed via a git repository. Pushing commits into the git repository will invoke a post-commit hook that causes the recompilation and reload of the zone files.

Some subdomains (specifically www.debian.org and security.debian.org) are served by the autodns/geodns setup on geo{1,2,3}. Their zone files are managed by a separate git repository.

updating DNSSEC records

TODO