This repository has no description
knot: use dataserial policy in master template
author
lassulus
date
(Dec 10, 2024, 6:55 PM CET)
commit
227c0c47
227c0c47961e5dee82537648737ce48dfa53ae40
parent
e1458cbe
e1458cbedeaf823c49b6a8e53d76a73cde4f1091
+34
-2
+34
-2
2configs/dns/knot.nix
+34
-2
2configs/dns/knot.nix
···
29
29
# algorithm: hmac-sha256
30
30
# secret: 00000000000000000000000000000000000000000000
31
31
#nix-shell -p knot-dns --run 'keymgr -t my_name hmac-sha256'
32
-
# clanCore.facts.services.knot = {
33
-
# secret."knot-keys.conf" = {};
32
+
# clanCore.vars.generators.knot = {
33
+
# files."knot-keys.conf" = {};
34
34
# generator = ''
35
35
# ${pkgs.knot-dns}/bin/keymgr -t hmac-sha256
36
36
# '';
···
126
126
ksk-size = 4096;
127
127
zsk-size = 2048;
128
128
nsec3 = true;
129
+
}
130
+
];
131
+
132
+
template = [
133
+
{
134
+
id = "default";
135
+
semantic-checks = "on";
136
+
global-module = "mod-rrl/default";
137
+
}
138
+
{
139
+
id = "master";
140
+
semantic-checks = "on";
141
+
notify = [
142
+
"hetzner_ip4_1"
143
+
"hetzner_ip4_2"
144
+
"hetzner_ip4_3"
145
+
"hetzner_ip6_1"
146
+
"hetzner_ip6_2"
147
+
"hetzner_ip6_3"
148
+
];
149
+
acl = [
150
+
"hetzner_ip4_1"
151
+
"hetzner_ip4_2"
152
+
"hetzner_ip4_3"
153
+
"hetzner_ip6_1"
154
+
"hetzner_ip6_2"
155
+
"hetzner_ip6_3"
156
+
];
157
+
zonefile-sync = "-1";
158
+
zonefile-load = "difference-no-serial";
159
+
serial-policy = "dateserial";
160
+
journal-content = "all";
129
161
}
130
162
];
131
163