zydronium/getnamingo-registry
1
0
Fork 0
mirror of https://github.com/getnamingo/registry.git synced 2025-06-02 18:48:34 +02:00
Code Issues Projects Releases Packages Wiki Activity

Improved DNSSEC policy

Browse source
This commit is contained in:
Pinga 2025-05-22 13:07:45 +03:00
parent fdfa78f508
commit b37e2b48f3
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/dns.md
View file

@ -91,6 +91,8 @@ dnssec-policy "namingo-policy" {
ksk lifetime P1Y algorithm ed25519;
zsk lifetime P2M algorithm ed25519;
};
nsec3param "1 0 5 auto";
publish-safety 7d;
max-zone-ttl 86400;
dnskey-ttl 3600;
zone-propagation-delay 3600;