server:
    version: "Knot DNS"
    nsid: "Potiron"
    rundir: "/run/knot"
    user: "knot:knot"
    listen: [ "2a01:e0a:15c:2e40:acab:3:3:3@53", "0.0.0.0@53" ]

log:
  - target: "/var/log/knot.log"
    any: "debug"

database:
    storage: "/var/lib/knot"

key:
  - id: "potironframboise."
    algorithm: "hmac-sha512"
    secret: "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

remote:
  - id: "Framboise"
    address: [ "2a0b:cbc0:1103:2::106f@53", "45.13.104.169@53" ]
    key: "potironframboise."

acl:
  - id: "FramboiseTrans"
    address: [ "2a0b:cbc0:1103:2::106f", "45.13.104.169" ]
    key: "potironframboise."
    action: "transfer"

policy:
  - id: "niver"
    algorithm: "ed25519"
    nsec3: "on"

template:
  - id: "niver"
    storage: "/var/lib/knot/zones"
    file: "%s.zone"
    notify: "Framboise"
    acl: "FramboiseTrans"
    zonefile-load: "difference"
    dnssec-signing: "on"
    dnssec-policy: "niver"

zone:
  - domain: "niv.re."
    template: "niver"