s3lph/ansible-collection-nameserver
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: add knot_dnssec_policy_nsec3_salt_length to argument_specs.yml
All checks were successful
Ansible Lint / build (push) Successful in 1m25s
Details
Ansible Galaxy / deploy (push) Successful in 1m57s
Details

Browse source
This commit is contained in:
s3lph 2024-06-05 01:19:06 +02:00
parent 4fc51962e1
commit c7d1cde8c3
Signed by: s3lph
GPG key ID: 0AA29A52FB33CFB5
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
roles/knot/meta/argument_specs.yml
View file

@ -119,6 +119,14 @@ argument_specs:
- If set to C(off), C(NSEC) is used, which allows full zone enumeration. - If set to C(off), C(NSEC) is used, which allows full zone enumeration.
type: str type: str
default: 'on' default: 'on'
knot_dnssec_policy_nsec3_salt_length:
description:
- Length of the NSEC3 salt field.
- >-
Use of a NSEC3 salt is discouraged by
U(RFC 9276,https://datatracker.ietf.org/doc/html/rfc9276#section-3.1).
type: int
default: 0
knot_dnssec_policy_ksk_size: knot_dnssec_policy_ksk_size:
description: description:
- Size (in bits) of the KSK. - Size (in bits) of the KSK.