Was initially caught by kzonecheck after deployment of the zone file, and before reloading knot.

Configured at OVH level.

Next: reconfigure DNS zone in HE control panel, as it only has our IPv4.

DNS server listens correctly to IPv6:

Dorian and me retested the configuration this Monday evening, with the same findings.

So it's definitely ns1.he.net, because if I put slave.dns.he.net the TCP connection isn't established:

Claude Sonnet artifacts

I think configuration could actually be nice but I forgot in D3766 to bump the serial. Let's check (and do a test to detect that).

Dorian and me meet this evening to do the switch.

Not spot anymore. Python 3.11 is used on every FreeBSD systems now.

Closing as a duplicate, as with T1217 task, automation is there:

• new records can be submitted as a commit against zone file
• new zones can be added by creating a new file and pillar entry

Per T2105, current solution is to use an external provider (Hurricane Electric?) to host our secondary zone.

To reduce Python issues, one of the solution could be to switch to acme.sh