Set publish-safety and retire-safety to 7d

This gives more leeway when keys are rotated.

Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>

1 files changed, 2 insertions, 0 deletions

diff --git a/named.conf b/named.conf
index 26b796d..8e1f825 100644
--- a/named.conf
+++ b/named.conf
@@ -26,6 +26,8 @@ dnssec-policy standard {
 		ksk lifetime 365d algorithm ed25519;
 		zsk lifetime 60d algorithm ed25519;
 	};
+	publish-safety 7d;
+	retire-safety 7d;
 };
 
 parental-agents "com" {