From 6f85893ca39481190d4cd32d382c3ca45a1ed640 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Kjetil=20=C3=98rbekk?= <kj@orbekk.com>
Date: Wed, 26 Feb 2020 10:42:56 -0500
Subject: Fix bind serials stuck in the past

---
 config/dns.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

(limited to 'config')

diff --git a/config/dns.nix b/config/dns.nix
index e615651..32d54a5 100644
--- a/config/dns.nix
+++ b/config/dns.nix
@@ -13,6 +13,9 @@ in
 
   services.bind = {
     enable = true;
+    extraOptions = ''
+      serial-update-method unixtime;
+    '';
     extraConfig = ''
       ${lib.concatMapStrings (zone: ''
         zone ${zone} {
@@ -20,6 +23,7 @@ in
           file "/var/run/named/db.${zone}.zone";
           auto-dnssec maintain;
 	  inline-signing yes;
+          sig-validity-interval 21 16;
           key-directory "/opt/secret/bind/${zone}";
           update-policy local;
           allow-query { any; };
@@ -68,7 +72,8 @@ in
 
   systemd.services.bind = {
     preStart = lib.mkAfter ''
-      rm /var/run/named/*.jnl || true
+      #rm /var/run/named/*.jnl || true
+      #rm /var/run/named/*.jbk || true
       cp -f ${zone-files}/* /var/run/named/
     '';
   };
-- 
cgit v1.2.3