Hi Tobias,
my configuration looks like this:
```
template:
- id: "default"
storage: "/var/lib/knot"
zonefile-sync: "0"
dnssec-signing: "on"
kasp-db: "/etc/knot/keys"
serial-policy: "unixtime"
notify: [ "trubka" ]
acl: [ "acl_trubka" ]
file: "/etc/knot/zones/%s"
```
We don't have an option to write signed zonefile elsewhere, but you can set
`zonefile-sync: -1`[1] to disable syncing of the zones to the disk. That way
the signatures will be kept only in the zone journal.
1. https://www.knot-dns.cz/docs/2.0/html/reference.html#zonefile-sync
Cheers,
Ondrej
--
Ondřej Surý -- Technical Fellow
--------------------------------------------
CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC
Milesovska 5, 130 00 Praha 3, Czech Republic
mailto:[email protected] https://nic.cz/
--------------------------------------------
----- Original Message -----
> From: "Tobias Brunner" <[email protected]>
> To: [email protected]
> Sent: Tuesday, December 29, 2015 12:03:55 PM
> Subject: [knot-dns-users] Manage zonefile directory in git
> Hi everyone,
>
> I'd like to manage the directory holding all the zonefiles in git to have a
> workflow like "git push -> webhook -> zonefiles git pull -> knotc reload".
> With Knot versions <2 this was working great because Knot did not change
> anything in this directory. But when using Knot 2.x with DNSSEC enabled, Knot
> rewrites the zonefiles of DNSSEC enabled zones, creates a timers subdirectory
> and puts some *.db files into the zones directory. Are there any configuration
> parameters to change this behaviour? So that the timers subdirectory is
> created outside the directory holding zonefiles (preferably configurable), the
> *.db files are also written into a dedicated directory and signed zonefiles
> are
> saved into a different subdirectory.
> Or are there any proposals how I could manage the zonefiles directory with git
> when using Knot 2.x with DNSSEC enabled?
>
> Thanks a lot for all input.
>
> Cheers and happy new year!
> Tobias
> _______________________________________________
> knot-dns-users mailing list
> [email protected]
> https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
_______________________________________________
knot-dns-users mailing list
[email protected]
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
