From b3d4f869780a3024116caab0de95374cad147cdf Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Wed, 4 Nov 2015 17:03:31 +0000
Subject: [PATCH] Fix rndc key to be the one in private only. Thanks doteast

---
 roles/dns/files/named.conf | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/roles/dns/files/named.conf b/roles/dns/files/named.conf
index 7f90ab2fc5..ad6b06da76 100644
--- a/roles/dns/files/named.conf
+++ b/roles/dns/files/named.conf
@@ -10,10 +10,9 @@
 // Setup for GeoDNS
 include "/var/named/GeoIP.acl";
 
-key "rndckey" {
-        algorithm       hmac-md5;
-        secret          "41x7Lj4MEobl58VDDK97ItQTGQq7MlahOcmlTYpxTDnS0ALgBaYWXg5KbnBp";
-};
+//include rndckey
+include "/etc/rndc.key";
+
 // dns1.j2solutions.net - run by Jesse Keating <jkeating@redhat.com>
 acl "slaves" { 209.124.61.35; };
 //