s3lph/ansible-collection-nameserver
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: add knot_dnssec_policy_nsec3_salt_length with default 0
All checks were successful
Ansible Lint / build (push) Successful in 1m30s
Details

Browse source
This commit is contained in:
s3lph 2024-06-05 01:15:25 +02:00
parent 2d034ea22d
commit 4fc51962e1
Signed by: s3lph
GPG key ID: 0AA29A52FB33CFB5
3 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
galaxy.yml
View file

@ -7,7 +7,7 @@ namespace: s3lph
name: nameserver
# The version of the collection. Must be compatible with semantic versioning
version: "0.4.2"
version: "0.4.3"
# The path to the Markdown (.md) readme file. This path is relative to the root of the collection
readme: README.md

2
roles/knot/defaults/main.yml
View file

@ -25,6 +25,8 @@ knot_zone_dnssec_signing: 'on'
knot_dnssec_policy_algorithm: ed25519
knot_dnssec_policy_nsec3: 'on'
# Use of a NSEC3 salt is discouraged by RFC 9276, section 3.1
knot_dnssec_policy_nsec3_salt_length: 0
knot_dnssec_policy_ksk_shared: 'off'
knot_dnssec_policy_ksk_size: 256
knot_dnssec_policy_zsk_size: 256

3
roles/knot/templates/etc/knot/knot.conf.j2
View file

@ -104,7 +104,8 @@ policy:
- id: dnssec-{{ zone.name }}
algorithm: {{ zone.algorithm | default(knot_dnssec_policy_algorithm) }}
nsec3: {{ knot_dnssec_policy_nsec3 }}
nsec3: {{ zone.nsec3 | default(knot_dnssec_policy_nsec3) }}
nsec3-salt-length: {{ zone.nsec3_salt_length | default(knot_dnssec_policy_nsec3_salt_length) }}
ksk-size: {{ zone.ksk_size | default(knot_dnssec_policy_ksk_size) }}
zsk-size: {{ zone.zsk_size | default(knot_dnssec_policy_zsk_size) }}
zsk-lifetime: {{ zone.zsk_lifetime | default(knot_dnssec_policy_zsk_lifetime) }}