From e4e9e21e8c4da07b53dad2382d06ef7742a37da3 Mon Sep 17 00:00:00 2001
From: s3lph <account-gitlab-ideynizv@kernelpanic.lol>
Date: Tue, 14 Jun 2022 12:58:45 +0200
Subject: [PATCH] Make cds_cndskey_publish configurable per zone

---
 roles/knot/templates/etc/knot/knot.conf.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/knot/templates/etc/knot/knot.conf.j2 b/roles/knot/templates/etc/knot/knot.conf.j2
index 420837d..bfb197e 100644
--- a/roles/knot/templates/etc/knot/knot.conf.j2
+++ b/roles/knot/templates/etc/knot/knot.conf.j2
@@ -112,7 +112,7 @@ policy:
     ksk-submission: submission-{{ zone.name }}
     ksk-shared: {{ knot_dnssec_policy_ksk_shared }}
     propagation-delay: {{ zone.propagation_delay | default(knot_dnssec_policy_propagation_delay) }}
-    cds-cdnskey-publish: {{ knot_dnssec_policy_cds_publish }}
+    cds-cdnskey-publish: {{ zone.cds_cdnskey_publish | default(knot_dnssec_policy_cds_publish) }}
 {% endif %}
 {% endfor %}