This commit is contained in:
11
knot.conf
11
knot.conf
@@ -13,18 +13,12 @@ server:
|
||||
|
||||
# Disable recursion (authoritative only)
|
||||
answer-rotation: on
|
||||
semantic-checks: on
|
||||
|
||||
# Security settings
|
||||
max-udp-payload: 4096
|
||||
max-tcp-clients: 100
|
||||
max-zone-size: 500M
|
||||
|
||||
# Logging
|
||||
log:
|
||||
- target: syslog
|
||||
any: info
|
||||
|
||||
# Database configuration
|
||||
database:
|
||||
storage: "/var/lib/knot"
|
||||
@@ -48,7 +42,6 @@ policy:
|
||||
dnskey-ttl: 3600
|
||||
zone-max-ttl: 86400
|
||||
ksk-submission: parent_ds
|
||||
cds-cdnskey-publish: rollover
|
||||
cds-cdnskey-publish: always
|
||||
|
||||
# Remote server configuration (for zone transfers, notifications)
|
||||
@@ -90,10 +83,6 @@ template:
|
||||
journal-content: changes
|
||||
journal-max-usage: 10M
|
||||
|
||||
# Hidden primary: don't answer queries from public
|
||||
# Only serve AXFR/IXFR to secondaries
|
||||
master: on
|
||||
|
||||
# Zone configuration
|
||||
zone:
|
||||
- domain: my-dnssec-test-domain.de
|
||||
|
||||
Reference in New Issue
Block a user