From 31e614ab3ba6c652ed0644a9d5ed12c28175e74d Mon Sep 17 00:00:00 2001
From: Franziska Kunsmann <hi@kunsmann.eu>
Date: Sun, 29 Jan 2023 08:06:27 +0100
Subject: [PATCH] bundles/powerdns: allow exposing API to the world

---
 bundles/powerdns/metadata.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/bundles/powerdns/metadata.py b/bundles/powerdns/metadata.py
index 57f46f5..3cf5d4e 100644
--- a/bundles/powerdns/metadata.py
+++ b/bundles/powerdns/metadata.py
@@ -211,8 +211,9 @@ def firewall(metadata):
     return {
         'firewall': {
             'port_rules': {
-                '53': atomic(metadata.get('powerdns/restrict-to', {'*'})),
-                '53/udp': atomic(metadata.get('powerdns/restrict-to', {'*'})),
+                '53': atomic(metadata.get('powerdns/restrict-to/dns', {'*'})),
+                '53/udp': atomic(metadata.get('powerdns/restrict-to/dns', {'*'})),
+                '8081': atomic(metadata.get('powerdns/restrict-to/api', set())),
             },
         },
     }