feat: add knot_dnssec_policy_nsec3_salt_length to argument_specs.yml

2024-06-05 01:19:06 +02:00 · 2024-06-05 01:19:06 +02:00 · c7d1cde8c3
commit c7d1cde8c3
parent 4fc51962e1
1 changed files with 8 additions and 0 deletions
--- a/roles/knot/meta/argument_specs.yml
+++ b/roles/knot/meta/argument_specs.yml
@ -119,6 +119,14 @@ argument_specs:
          - If set to C(off), C(NSEC) is used, which allows full zone enumeration.
        type: str
        default: 'on'
+      knot_dnssec_policy_nsec3_salt_length:
+        description:
+          - Length of the NSEC3 salt field.
+          - >-
+            Use of a NSEC3 salt is discouraged by
+            U(RFC 9276,https://datatracker.ietf.org/doc/html/rfc9276#section-3.1).
+        type: int
+        default: 0
      knot_dnssec_policy_ksk_size:
        description:
          - Size (in bits) of the KSK.