---

knot_server_rundir: /run/knot
knot_server_user: knot
knot_server_group: knot
knot_server_identity: "{{ ansible_hostname }}"
knot_server_nsid: "{{ ansible_hostname }}"
knot_server_version: "{{ ansible_hostname }}"
knot_server_listen:
  - "::@53"
  - "0.0.0.0@53"

knot_log_targets:
  - target: syslog
    level: info

knot_zone_master_storage_path: /var/lib/knot/master
knot_zone_replica_storage_path: /var/lib/knot/replica
knot_zone_semantic_checks: 'on'
knot_zone_dnssec_signing: 'on'

knot_dnssec_policy_algorithm: ecdsap384sha384
knot_dnssec_policy_nsec3: 'on'
knot_dnssec_policy_ksk_shared: 'off'
knot_dnssec_policy_ksk_size: 384
knot_dnssec_policy_zsk_size: 384
knot_dnssec_policy_zsk_lifetime: 30d
knot_dnssec_policy_ksk_lifetime: 0
knot_dnssec_policy_cds_publish: 'double-ds'

knot_dnssec_submission_check_interval: 1h
knot_dnssec_submission_timeout: 0