From c6ece481a422083a7fb9d76487cc9e6a997eb907 Mon Sep 17 00:00:00 2001 From: Johannes Löthberg Date: Sun, 26 May 2024 23:09:04 +0200 Subject: Set publish-safety and retire-safety to 7d MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This gives more leeway when keys are rotated. Signed-off-by: Johannes Löthberg --- named.conf | 2 ++ 1 file changed, 2 insertions(+) (limited to 'named.conf') diff --git a/named.conf b/named.conf index 26b796d..8e1f825 100644 --- a/named.conf +++ b/named.conf @@ -26,6 +26,8 @@ dnssec-policy standard { ksk lifetime 365d algorithm ed25519; zsk lifetime 60d algorithm ed25519; }; + publish-safety 7d; + retire-safety 7d; }; parental-agents "com" { -- cgit v1.2.3-70-g09d2