From 2a28cf46175eba5a35c16f4a6ba1ca9bafd72c98 Mon Sep 17 00:00:00 2001
From: Johannes Löthberg <johannes@kyriasis.com>
Date: Fri, 23 May 2014 20:21:08 +0100
Subject: Add DNSSEC config to named.conf

---
 kyriasis.com.zone | 2 +-
 named.conf        | 7 +++++++
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/kyriasis.com.zone b/kyriasis.com.zone
index faf1225..f8c076a 100644
--- a/kyriasis.com.zone
+++ b/kyriasis.com.zone
@@ -4,7 +4,7 @@ $TTL 2h
 ; kyriasis.com
 
 @	IN	SOA	theos.kyriasis.com. hostmaster (
-				7	; serial
+				8	; serial
 				4h	; refresh
 				1h	; retry
 				1w	; expire
diff --git a/named.conf b/named.conf
index 4d903e3..2befe11 100644
--- a/named.conf
+++ b/named.conf
@@ -43,6 +43,13 @@ zone "kyriasis.com" IN {
 		2a01:7e00::f03c:91ff:fe69:1787; // lucifer
 	};
 	notify explicit;
+
+	key-directory "/home/kyrias/dns/keys";
+
+	# publish and activate dnssec keys
+	auto-dnssec maintain;
+
+	inline-signing yes;
 };
 
 logging {
-- 
cgit v1.2.3-70-g09d2