[bind-authoritative] Sign zones with DNSSEC

2021-10-14 14:26:02 +02:00 · 2021-10-14 14:26:02 +02:00 · 37696b9682
parent 40d5e3a11a
commit 37696b9682
1 changed files with 3 additions and 0 deletions
--- a/roles/bind-authoritative/templates/bind/named.conf.local.j2
+++ b/roles/bind-authoritative/templates/bind/named.conf.local.j2
@ -110,6 +110,9 @@ zone "{{ zone }}" {
 	// Apparmor: Need to ln -s /var/cache/bind/generated /var/local/re2o-services/dns/generated
 	file "generated/{{ zone }}.db";
 	notify yes;
+	inline-signing yes;
+	auto-dnssec maintain;
+	serial-update-method increment;
 {% else %}
 	type slave;
 	file "bak.{{ zone }}";