crans
/
ansible
mirror of http://gitlab.adm.crans.org/nounous/ansible.git
19
0
Fork 0
Code Issues Projects Releases Wiki Activity

[bind-authoritative] Sign zones with DNSSEC

dnssec
_benjamin 2021-10-14 14:26:02 +02:00 committed by Yohann D'ANELLO
parent 40d5e3a11a
commit 37696b9682
Signed by: _ynerant
GPG Key ID: 3A75C55819C8CF85
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
roles/bind-authoritative/templates/bind/named.conf.local.j2
View File

@ -110,6 +110,9 @@ zone "{{ zone }}" {
// Apparmor: Need to ln -s /var/cache/bind/generated /var/local/re2o-services/dns/generated // Apparmor: Need to ln -s /var/cache/bind/generated /var/local/re2o-services/dns/generated
file "generated/{{ zone }}.db"; file "generated/{{ zone }}.db";
notify yes; notify yes;
inline-signing yes;
auto-dnssec maintain;
serial-update-method increment;
{% else %} {% else %}
type slave; type slave;
file "bak.{{ zone }}"; file "bak.{{ zone }}";