29 Pro
2015
29 Pro
'15
12:37
Hi Tobias,
my configuration looks like this:
```
template:
- id: "default"
storage: "/var/lib/knot"
zonefile-sync: "0"
dnssec-signing: "on"
kasp-db: "/etc/knot/keys"
serial-policy: "unixtime"
notify: [ "trubka" ]
acl: [ "acl_trubka" ]
file: "/etc/knot/zones/%s"
```
We don't have an option to write signed zonefile elsewhere, but you can set
`zonefile-sync: -1`[1] to disable syncing of the zones to the disk. That way the
signatures will be kept only in the zone journal.
1. https://www.knot-dns.cz/docs/2.0/html/reference.html#zonefile-sync
Cheers,
Ondrej
--
Ondřej Surý -- Technical Fellow
--------------------------------------------
CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC
Milesovska 5, 130 00 Praha 3, Czech Republic
mailto:ondrej.sury@nic.cz https://nic.cz/
--------------------------------------------
----- Original Message -----
From: "Tobias Brunner"
<tobias(a)tobru.ch>
To: knot-dns-users(a)lists.nic.cz
Sent: Tuesday, December 29, 2015 12:03:55 PM
Subject: [knot-dns-users] Manage zonefile directory in git
Hi everyone,
I'd like to manage the directory holding all the zonefiles in git to have a
workflow like "git push -> webhook -> zonefiles git pull -> knotc
reload".
With Knot versions <2 this was working great because Knot did not change
anything in this directory. But when using Knot 2.x with DNSSEC enabled, Knot
rewrites the zonefiles of DNSSEC enabled zones, creates a timers subdirectory
and puts some *.db files into the zones directory. Are there any configuration
parameters to change this behaviour? So that the timers subdirectory is
created outside the directory holding zonefiles (preferably configurable), the
*.db files are also written into a dedicated directory and signed zonefiles are
saved into a different subdirectory.
Or are there any proposals how I could manage the zonefiles directory with git
when using Knot 2.x with DNSSEC enabled?
Thanks a lot for all input.
Cheers and happy new year!
Tobias
_______________________________________________
knot-dns-users mailing list
knot-dns-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users