diff options
| author | Kjetil Ørbekk <kj@orbekk.com> | 2020-02-26 10:42:56 -0500 |
|---|---|---|
| committer | Kjetil Ørbekk <kj@orbekk.com> | 2020-02-26 10:43:07 -0500 |
| commit | 6f85893ca39481190d4cd32d382c3ca45a1ed640 (patch) | |
| tree | d1a8c7faa9400fc1ef4bfa264e5985d431e97876 /config | |
| parent | 5dd70290c35697cf4e163e21029988631f28c6a2 (diff) | |
Fix bind serials stuck in the past
Diffstat (limited to 'config')
| -rw-r--r-- | config/dns.nix | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/config/dns.nix b/config/dns.nix index e615651..32d54a5 100644 --- a/config/dns.nix +++ b/config/dns.nix @@ -13,6 +13,9 @@ in services.bind = { enable = true; + extraOptions = '' + serial-update-method unixtime; + ''; extraConfig = '' ${lib.concatMapStrings (zone: '' zone ${zone} { @@ -20,6 +23,7 @@ in file "/var/run/named/db.${zone}.zone"; auto-dnssec maintain; inline-signing yes; + sig-validity-interval 21 16; key-directory "/opt/secret/bind/${zone}"; update-policy local; allow-query { any; }; @@ -68,7 +72,8 @@ in systemd.services.bind = { preStart = lib.mkAfter '' - rm /var/run/named/*.jnl || true + #rm /var/run/named/*.jnl || true + #rm /var/run/named/*.jbk || true cp -f ${zone-files}/* /var/run/named/ ''; }; |