sir_melonchenandClaude Opus 5.5
f037675596
Render always writes the secret ddi-suite-keys.conf (only a comment without keys). Primary zones of a cluster get "notify explicit", "also-notify" and "allow-transfer" with the transfer key; secondary zones transfer from their primaries with the key into <zone_dir>/secondary/ and have no artifact. Dynamic zones accept the update keys in their ACL. Keys are validated (name, algorithm whitelist, canonical base64) and every referenced key must exist. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
7 lines
356 B
Plaintext
7 lines
356 B
Plaintext
; Initial file of the dynamic zone keys-only.test, generated by DDI Suite (revision 8).
|
|
; BIND owns this file once it exists; the DNS agent never overwrites it.
|
|
$ORIGIN keys-only.test.
|
|
$TTL 1200
|
|
@ IN SOA ns1.dyn.test. hostmaster.dyn.test. 8 3600 600 604800 300
|
|
@ IN NS ns1.dyn.test.
|