From b37e2b48f31ebfe45d23c73cb0b7b1f674b3eb97 Mon Sep 17 00:00:00 2001
From: Pinga <help@namingo.org>
Date: Thu, 22 May 2025 13:07:45 +0300
Subject: [PATCH] Improved DNSSEC policy

---
 docs/dns.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docs/dns.md b/docs/dns.md
index 0c25c73..8161dfa 100644
--- a/docs/dns.md
+++ b/docs/dns.md
@@ -91,6 +91,8 @@ dnssec-policy "namingo-policy" {
         ksk lifetime P1Y algorithm ed25519;
         zsk lifetime P2M algorithm ed25519;
     };
+    nsec3param "1 0 5 auto";
+    publish-safety 7d;
     max-zone-ttl 86400;
     dnskey-ttl 3600;
     zone-propagation-delay 3600;