fix knot dns acl
This commit is contained in:
parent
299eea26a8
commit
cef4dce2e9
@ -6,7 +6,6 @@ knot_conf: |
|
|||||||
rundir: "/run/knot"
|
rundir: "/run/knot"
|
||||||
user: knot:knot
|
user: knot:knot
|
||||||
listen: [ 0.0.0.0@53, ::@53 ]
|
listen: [ 0.0.0.0@53, ::@53 ]
|
||||||
udp-max-payload: 1232
|
|
||||||
|
|
||||||
log:
|
log:
|
||||||
- target: syslog
|
- target: syslog
|
||||||
@ -70,7 +69,7 @@ knot_conf: |
|
|||||||
- domain: "{{ domain }}"
|
- domain: "{{ domain }}"
|
||||||
storage: "/var/lib/knot/zones/"
|
storage: "/var/lib/knot/zones/"
|
||||||
file: "{{ domain }}.zone"
|
file: "{{ domain }}.zone"
|
||||||
acl: [deny_all, key_rule]
|
acl: [key_rule]
|
||||||
dnssec-signing: on
|
dnssec-signing: on
|
||||||
dnssec-policy: rsa
|
dnssec-policy: rsa
|
||||||
zonefile-load: difference
|
zonefile-load: difference
|
||||||
|
Loading…
Reference in New Issue
Block a user