diff options
Diffstat (limited to 'config/dns.nix')
| -rw-r--r-- | config/dns.nix | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/config/dns.nix b/config/dns.nix index e615651..32d54a5 100644 --- a/config/dns.nix +++ b/config/dns.nix @@ -13,6 +13,9 @@ in services.bind = { enable = true; + extraOptions = '' + serial-update-method unixtime; + ''; extraConfig = '' ${lib.concatMapStrings (zone: '' zone ${zone} { @@ -20,6 +23,7 @@ in file "/var/run/named/db.${zone}.zone"; auto-dnssec maintain; inline-signing yes; + sig-validity-interval 21 16; key-directory "/opt/secret/bind/${zone}"; update-policy local; allow-query { any; }; @@ -68,7 +72,8 @@ in systemd.services.bind = { preStart = lib.mkAfter '' - rm /var/run/named/*.jnl || true + #rm /var/run/named/*.jnl || true + #rm /var/run/named/*.jbk || true cp -f ${zone-files}/* /var/run/named/ ''; }; |