# dnssec-signzone -A -3 $(head -c 1000 /dev/urandom | sha1sum | cut -b 1-16) -N unixtime -o $zone -t db.${zone} { config, lib, pkgs, ... }: { services.bind = { enable = true; }; systemd.services.bind = { preStart = lib.mkAfter "echo test"; }; }