From 9f66416293a4da3a85be31150a292e67ac537a41 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Tue, 22 Feb 2022 11:58:27 +0100
Subject: ...

---
 hosts/surtr/tls/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hosts/surtr/tls/default.nix b/hosts/surtr/tls/default.nix
index 9f8d92d6..237e0779 100644
--- a/hosts/surtr/tls/default.nix
+++ b/hosts/surtr/tls/default.nix
@@ -124,9 +124,9 @@ in {
                 RFC2136_TSIG_ALGORITHM=hmac-sha256.
                 RFC2136_TSIG_KEY=${domain}_acme_key
                 RFC2136_TSIG_SECRET_FILE=${tsigSecret.path}
+                RFC2136_TTL=0
                 RFC2136_PROPAGATION_TIMEOUT=300
                 RFC2136_POLLING_INTERVAL=5
-                RFC2136_TTL=300
               '';
             };
           in (if isTsig then mkRFC2136 else mkKnotc) // cfg.domains.${domain}.certCfg;
-- 
cgit v1.2.3