Add parental-agents for automatic KSK published checking

Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>

1 files changed, 14 insertions, 0 deletions

diff --git a/named.conf b/named.conf
index 0fae0f2..2285656 100644
--- a/named.conf
+++ b/named.conf
@@ -28,6 +28,18 @@ dnssec-policy standard {
 	};
 };
 
+parental-agents "com" {
+	192.5.6.30; // a.gtld-servers.net.
+	192.33.14.30; // b.gtld-servers.net.
+	192.26.92.30; // c.gtld-servers.net.
+};
+
+parental-agents "io" {
+	65.22.160.17; // a0.nic.io.
+	65.22.161.17; // b0.nic.io.
+	65.22.162.17; // c0.nic.io.
+};
+
 zone "kyriasis.com" IN {
 	type master;
 	file "dns/kyriasis.com.zone";
@@ -38,6 +50,7 @@ zone "kyriasis.com" IN {
 	};
 
 	dnssec-policy standard;
+	parental-agents { "com"; };
 };
 
 zone "remmy.io" IN {
@@ -50,6 +63,7 @@ zone "remmy.io" IN {
 	};
 
 	dnssec-policy standard;
+	parental-agents { "io"; };
 };
 
 logging {