s3lph/ansible-collection-nameserver
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prevent zone file from being overwritten on DNSSEC resigns

Browse source
This commit is contained in:
s3lph 2021-09-29 22:45:26 +02:00
parent b7f304a70e
commit 9402eee1c1
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/knot/templates/etc/knot/knot.conf.j2
View file

@ -107,6 +107,8 @@ zone:
semantic-checks: {{ knot_zone_semantic_checks }} semantic-checks: {{ knot_zone_semantic_checks }}
serial-policy: unixtime serial-policy: unixtime
zonefile-load: difference zonefile-load: difference
zonefile-sync: -1
journal-content: changes
dnssec-signing: {{ knot_zone_dnssec_signing }} dnssec-signing: {{ knot_zone_dnssec_signing }}
dnssec-policy: dnssec-{{ zone.name }} dnssec-policy: dnssec-{{ zone.name }}
{% for replica in zone.replicas %} {% for replica in zone.replicas %}