Resolved in the Gitter chat...
On 6/28/26 22:32, Smith via knot-dns-users wrote:
Hi
I have two questions about this blog post on multi-signers:
https://en.blog.nic.cz/2025/05/07/knot-dns-in-a-complex-dnssec-topology/
First, the blog post shows auto-increment SOA serial mode for the zone files
in-line with the docs example:
```
zonefile-sync: -1zonefile-load: difference-no-serial
journal-content: all
```
This would work fine for me in general, I don't mind zone files being the "source of
truth".
But the docs has a note "This mode is not suitable if the zone can be modified
externally (e.g. DDNS, knotc)."
Do I understand correctly that this is because any dynamic changes to the zone
get wiped on reboot ? So, for example, if the only external DDNS modification
in my environment is DNS-01 for cert issuance, it won't cause me a problem,
because those are ephemeral by nature anyway ?
This then raises the second question, how would I deal with catlog zones with
this concept of multi-signers ? Or are catlog zones too much trouble in a
multi-signer environment ?
Thank you
--
--
