Prevent zone file from being overwritten on DNSSEC resigns

2021-09-29 22:45:26 +02:00 · 2021-09-29 22:45:26 +02:00 · 9402eee1c1
commit 9402eee1c1
parent b7f304a70e
1 changed files with 2 additions and 0 deletions
--- a/roles/knot/templates/etc/knot/knot.conf.j2
+++ b/roles/knot/templates/etc/knot/knot.conf.j2
@ -107,6 +107,8 @@ zone:
    semantic-checks: {{ knot_zone_semantic_checks }}
    serial-policy: unixtime
    zonefile-load: difference
+    zonefile-sync: -1
+    journal-content: changes
    dnssec-signing: {{ knot_zone_dnssec_signing }}
    dnssec-policy: dnssec-{{ zone.name }}
 {% for replica in zone.replicas %}