Render always writes the secret ddi-suite-keys.conf (only a comment without keys). Primary zones of a cluster get "notify explicit", "also-notify" and "allow-transfer" with the transfer key; secondary zones transfer from their primaries with the key into <zone_dir>/secondary/ and have no artifact. Dynamic zones accept the update keys in their ACL. Keys are validated (name, algorithm whitelist, canonical base64) and every referenced key must exist. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
9 lines
456 B
Plaintext
9 lines
456 B
Plaintext
; Initial file of the dynamic zone dyn.test, generated by DDI Suite (revision 8).
|
|
; BIND owns this file once it exists; the DNS agent never overwrites it.
|
|
$ORIGIN dyn.test.
|
|
$TTL 1200
|
|
@ IN SOA ns1.dyn.test. hostmaster.dyn.test. 8 3600 600 604800 300
|
|
@ IN NS ns1.dyn.test.
|
|
ns1 IN A 192.0.2.53
|
|
dc1 IN A 192.0.2.20
|