From 9402eee1c1c4eb2a485abddaa8d9431bff2cf969 Mon Sep 17 00:00:00 2001
From: s3lph <account-gitlab-ideynizv@kernelpanic.lol>
Date: Wed, 29 Sep 2021 22:45:26 +0200
Subject: [PATCH] Prevent zone file from being overwritten on DNSSEC resigns

---
 roles/knot/templates/etc/knot/knot.conf.j2 | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/roles/knot/templates/etc/knot/knot.conf.j2 b/roles/knot/templates/etc/knot/knot.conf.j2
index 59873b1..4977766 100644
--- a/roles/knot/templates/etc/knot/knot.conf.j2
+++ b/roles/knot/templates/etc/knot/knot.conf.j2
@@ -107,6 +107,8 @@ zone:
     semantic-checks: {{ knot_zone_semantic_checks }}
     serial-policy: unixtime
     zonefile-load: difference
+    zonefile-sync: -1
+    journal-content: changes
     dnssec-signing: {{ knot_zone_dnssec_signing }}
     dnssec-policy: dnssec-{{ zone.name }}
 {% for replica in zone.replicas %}