diff options
Diffstat (limited to 'hosts/surtr/dns')
| -rw-r--r-- | hosts/surtr/dns/default.nix | 24 |
1 files changed, 12 insertions, 12 deletions
diff --git a/hosts/surtr/dns/default.nix b/hosts/surtr/dns/default.nix index 4a1b2482..eb4dbe13 100644 --- a/hosts/surtr/dns/default.nix +++ b/hosts/surtr/dns/default.nix | |||
| @@ -36,6 +36,18 @@ | |||
| 36 | secret-lifetime: 4h | 36 | secret-lifetime: 4h |
| 37 | badcookie-slip: 1 | 37 | badcookie-slip: 1 |
| 38 | 38 | ||
| 39 | policy: | ||
| 40 | - id: rsa2048 | ||
| 41 | algorithm: rsasha256 | ||
| 42 | ksk-size: 4096 | ||
| 43 | zsk-size: 2048 | ||
| 44 | zsk-lifetime: 30d | ||
| 45 | - id: ed25519 | ||
| 46 | algorithm: ed25519 | ||
| 47 | nsec3: on | ||
| 48 | ksk-lifetime: 360d | ||
| 49 | signing-threads: 2 | ||
| 50 | |||
| 39 | template: | 51 | template: |
| 40 | - id: default | 52 | - id: default |
| 41 | global-module: [mod-cookies/default, mod-rrl/default] | 53 | global-module: [mod-cookies/default, mod-rrl/default] |
| @@ -51,18 +63,6 @@ | |||
| 51 | notify: [inwx_notify] | 63 | notify: [inwx_notify] |
| 52 | acl: [inwx_acl] | 64 | acl: [inwx_acl] |
| 53 | 65 | ||
| 54 | policy: | ||
| 55 | - id: rsa2048 | ||
| 56 | algorithm: rsasha256 | ||
| 57 | ksk-size: 4096 | ||
| 58 | zsk-size: 2048 | ||
| 59 | zsk-lifetime: 30d | ||
| 60 | - id: ed25519 | ||
| 61 | algorithm: ed25519 | ||
| 62 | nsec3: on | ||
| 63 | ksk-lifetime: 360d | ||
| 64 | signing-threads: 2 | ||
| 65 | |||
| 66 | zone: | 66 | zone: |
| 67 | - domain: yggdrasil.li | 67 | - domain: yggdrasil.li |
| 68 | template: inwx_zone | 68 | template: inwx_zone |