--- knot_server_rundir: /run/knot knot_server_user: knot knot_server_group: knot knot_server_listen: - "::@53" - "0.0.0.0@53" knot_log_targets: - target: syslog level: info knot_zone_master_storage_path: /var/lib/knot/master knot_zone_replica_storage_path: /var/lib/knot/replica knot_zone_semantic_checks: 'on' knot_zone_dnssec_signing: 'on' knot_dnssec_policy_algorithm: ecdsap384sha384 knot_dnssec_policy_nsec3: 'on' knot_dnssec_policy_ksk_shared: 'on' knot_dnssec_policy_ksk_size: 384 knot_dnssec_policy_zsk_size: 384 knot_dnssec_policy_cds_publish: 'double-ds'