Render always writes the secret ddi-suite-keys.conf (only a comment without keys). Primary zones of a cluster get "notify explicit", "also-notify" and "allow-transfer" with the transfer key; secondary zones transfer from their primaries with the key into <zone_dir>/secondary/ and have no artifact. Dynamic zones accept the update keys in their ACL. Keys are validated (name, algorithm whitelist, canonical base64) and every referenced key must exist. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
7 lines
237 B
Plaintext
7 lines
237 B
Plaintext
// Generated by DDI Suite (revision 8). Do not edit: the DNS agent
|
|
// overwrites this file. Include it inside the options block of named.conf
|
|
// and do not set the statements below there as well.
|
|
|
|
recursion no;
|
|
allow-transfer { none; };
|