Add config examples for zone transferts with Knot
This commit is contained in:
parent
4bdfe900c4
commit
9316ab1a80
|
@ -0,0 +1,53 @@
|
|||
server:
|
||||
version: "Knot"
|
||||
nsid: ""
|
||||
rundir: "/run/knot"
|
||||
user: "knot:knot"
|
||||
automatic-acl: "on"
|
||||
listen: [ "2001:db8::1@42053", "203.0.113.1@42053" ]
|
||||
|
||||
log:
|
||||
- target: "/var/log/knot/knot.log"
|
||||
any: "debug"
|
||||
|
||||
database:
|
||||
storage: "/var/lib/knot"
|
||||
|
||||
key:
|
||||
- id: "primary-to-secondary."
|
||||
algorithm: "hmac-sha256"
|
||||
secret: "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGH" # keymgr -t primary-to-secondary hmac-sha256
|
||||
|
||||
remote:
|
||||
- id: "secondary"
|
||||
address: [ "2001:db8::2@53", "203.0.113.2@53" ]
|
||||
key: "primary-to-secondary."
|
||||
|
||||
policy:
|
||||
- id: "niver"
|
||||
algorithm: "ed25519"
|
||||
nsec3: "on"
|
||||
nsec3-iterations: 10
|
||||
|
||||
template:
|
||||
- id: "niver-ns"
|
||||
storage: "/srv/niver/ns"
|
||||
file: "%s.zone"
|
||||
zonefile-load: "difference"
|
||||
dnssec-signing: "on"
|
||||
dnssec-policy: "niver"
|
||||
catalog-role: "member"
|
||||
catalog-zone: "niver.test.invalid."
|
||||
|
||||
zone:
|
||||
- domain: "niver.test."
|
||||
storage: "/srv/niver/reg"
|
||||
file: "%s.zone"
|
||||
zonefile-load: "difference"
|
||||
dnssec-signing: "on"
|
||||
dnssec-policy: "niver"
|
||||
|
||||
- domain: "niver.test.invalid."
|
||||
notify: "secondary"
|
||||
zonefile-load: "difference"
|
||||
catalog-role: "generate"
|
|
@ -0,0 +1,37 @@
|
|||
server:
|
||||
version: "Knot"
|
||||
nsid: ""
|
||||
rundir: "/run/knot"
|
||||
user: "knot:knot"
|
||||
automatic-acl: "on"
|
||||
listen: [ "2001:db8::2@53", "203.0.113.2@53" ]
|
||||
|
||||
log:
|
||||
- target: "/var/log/knot/knot.log"
|
||||
any: "debug"
|
||||
|
||||
database:
|
||||
storage: "/var/lib/knot"
|
||||
|
||||
key:
|
||||
- id: "primary-to-secondary."
|
||||
algorithm: "hmac-sha256"
|
||||
secret: "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGH"
|
||||
|
||||
remote:
|
||||
- id: "primary"
|
||||
address: [ "2001:db8::1@53", "203.0.113.1@53" ]
|
||||
key: "primary-to-secondary."
|
||||
|
||||
template:
|
||||
- id: "niver"
|
||||
storage: "/var/lib/knot"
|
||||
file: "%s.zone"
|
||||
master: "primary"
|
||||
|
||||
zone:
|
||||
- domain: "niver.test.invalid."
|
||||
master: "primary"
|
||||
catalog-role: interpret
|
||||
catalog-template: "niver"
|
||||
|
Loading…
Reference in New Issue