Hi Ondrej, Thanks for your fast answer!
> my configuration looks like this: > > ``` > template: > - id: "default" > storage: "/var/lib/knot" > zonefile-sync: "0" > dnssec-signing: "on" > kasp-db: "/etc/knot/keys" > serial-policy: "unixtime" > notify: [ "trubka" ] > acl: [ "acl_trubka" ] > file: "/etc/knot/zones/%s" > ``` > > We don't have an option to write signed zonefile elsewhere, but you can set > `zonefile-sync: -1`[1] to disable syncing of the zones to the disk. That > way the signatures will be kept only in the zone journal. > > 1. https://www.knot-dns.cz/docs/2.0/html/reference.html#zonefile-sync That's great! This solves all of my "troubles" I had... Cheers, Tobias
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ knot-dns-users mailing list [email protected] https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
