Compare commits
2 commits
85c7ce1935
...
33259ce7a3
Author | SHA1 | Date | |
---|---|---|---|
|
33259ce7a3 | ||
975f220d31 |
1 changed files with 3 additions and 13 deletions
|
@ -53,22 +53,12 @@
|
||||||
# Enable ACME ACL on all zones
|
# Enable ACME ACL on all zones
|
||||||
acl = ["acme"];
|
acl = ["acme"];
|
||||||
# Enable automatic DNSSEC signing on all zones. The KSK must be
|
# Enable automatic DNSSEC signing on all zones. The KSK must be
|
||||||
# configured in the parent zone through the registrar. Either the
|
# configured in the parent zone. Use the following command to get the
|
||||||
# DNSKEY or DS, depending on registrar:
|
# required record(s):
|
||||||
#
|
|
||||||
# > sudo keymgr caspervk.net dnskey
|
|
||||||
# [<zone> <record-type> <key-type> <protocol> <algorithm-type> <public-key>]
|
|
||||||
#
|
|
||||||
# OR
|
|
||||||
#
|
|
||||||
# > sudo keymgr caspervk.net ds
|
# > sudo keymgr caspervk.net ds
|
||||||
# [<zone> <record-type> <key-tag> <algorithm-type> <digest-type> <digest>]
|
# [<zone> <record-type> <key-tag> <algorithm-type> <digest-type> <digest>]
|
||||||
#
|
|
||||||
# https://knot.readthedocs.io/en/master/configuration.html#automatic-dnssec-signing
|
# https://knot.readthedocs.io/en/master/configuration.html#automatic-dnssec-signing
|
||||||
#
|
# DNSSEC can be validated using https://dnsviz.net.
|
||||||
# DNSSEC can be validated using:
|
|
||||||
# - https://dnssec-debugger.verisignlabs.com
|
|
||||||
# - https://dnsviz.net
|
|
||||||
dnssec-signing = "on";
|
dnssec-signing = "on";
|
||||||
dnssec-policy = "default";
|
dnssec-policy = "default";
|
||||||
# Knot overwrites the zonefiles with auto-generated DNSSEC records by
|
# Knot overwrites the zonefiles with auto-generated DNSSEC records by
|
||||||
|
|
Loading…
Add table
Reference in a new issue