summaryrefslogtreecommitdiff
path: root/hosts
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2022-02-14 20:04:46 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2022-02-14 20:04:46 +0100
commitecee0dcdc0886ec2ad0558d1211b00f2ec2194a2 (patch)
tree74e03dfd5cc22e24a3f96b5ddce7d475940fbda8 /hosts
parent25d546f6099cf70ec1ad5d9eb8923e01424057ab (diff)
downloadnixos-ecee0dcdc0886ec2ad0558d1211b00f2ec2194a2.tar
nixos-ecee0dcdc0886ec2ad0558d1211b00f2ec2194a2.tar.gz
nixos-ecee0dcdc0886ec2ad0558d1211b00f2ec2194a2.tar.bz2
nixos-ecee0dcdc0886ec2ad0558d1211b00f2ec2194a2.tar.xz
nixos-ecee0dcdc0886ec2ad0558d1211b00f2ec2194a2.zip
...
Diffstat (limited to 'hosts')
-rw-r--r--hosts/surtr/dns/default.nix24
1 files changed, 12 insertions, 12 deletions
diff --git a/hosts/surtr/dns/default.nix b/hosts/surtr/dns/default.nix
index 4a1b2482..eb4dbe13 100644
--- a/hosts/surtr/dns/default.nix
+++ b/hosts/surtr/dns/default.nix
@@ -36,6 +36,18 @@
36 secret-lifetime: 4h 36 secret-lifetime: 4h
37 badcookie-slip: 1 37 badcookie-slip: 1
38 38
39 policy:
40 - id: rsa2048
41 algorithm: rsasha256
42 ksk-size: 4096
43 zsk-size: 2048
44 zsk-lifetime: 30d
45 - id: ed25519
46 algorithm: ed25519
47 nsec3: on
48 ksk-lifetime: 360d
49 signing-threads: 2
50
39 template: 51 template:
40 - id: default 52 - id: default
41 global-module: [mod-cookies/default, mod-rrl/default] 53 global-module: [mod-cookies/default, mod-rrl/default]
@@ -51,18 +63,6 @@
51 notify: [inwx_notify] 63 notify: [inwx_notify]
52 acl: [inwx_acl] 64 acl: [inwx_acl]
53 65
54 policy:
55 - id: rsa2048
56 algorithm: rsasha256
57 ksk-size: 4096
58 zsk-size: 2048
59 zsk-lifetime: 30d
60 - id: ed25519
61 algorithm: ed25519
62 nsec3: on
63 ksk-lifetime: 360d
64 signing-threads: 2
65
66 zone: 66 zone:
67 - domain: yggdrasil.li 67 - domain: yggdrasil.li
68 template: inwx_zone 68 template: inwx_zone