summaryrefslogtreecommitdiff
path: root/bind/named.conf.acl
diff options
context:
space:
mode:
authorJonas Smedegaard <dr@jones.dk>2023-05-10 19:52:20 +0200
committerJonas Smedegaard <dr@jones.dk>2023-05-10 19:52:20 +0200
commit6b2dcad324a262057d6b0e781183cd8f5456b83b (patch)
treee882adb8bafdc57aa0ab3941b8a04b08c0c4cbe4 /bind/named.conf.acl
parent232288230e4de7fff3c6d1106e4b611818aaa864 (diff)
use dnssec-policy (not deprecated auto-dnssec maintain)
Diffstat (limited to 'bind/named.conf.acl')
-rw-r--r--bind/named.conf.acl8
1 files changed, 8 insertions, 0 deletions
diff --git a/bind/named.conf.acl b/bind/named.conf.acl
index bb2ddbd..f3e3053 100644
--- a/bind/named.conf.acl
+++ b/bind/named.conf.acl
@@ -7,3 +7,11 @@ acl jones_peers {
194.45.78.41; // dns.jones.dk
217.70.177.40; // ns6.gandi.net
};
+
+dnssec-policy jones_no_rotate {
+ keys {
+ ksk key-directory lifetime unlimited algorithm 13;
+ zsk key-directory lifetime unlimited algorithm 13;
+ };
+ nsec3param;
+};