mirror of
https://github.com/getnamingo/registry.git
synced 2025-06-06 04:27:16 +02:00
Improved DNSSEC policy
This commit is contained in:
parent
fdfa78f508
commit
b37e2b48f3
1 changed files with 2 additions and 0 deletions
|
@ -91,6 +91,8 @@ dnssec-policy "namingo-policy" {
|
||||||
ksk lifetime P1Y algorithm ed25519;
|
ksk lifetime P1Y algorithm ed25519;
|
||||||
zsk lifetime P2M algorithm ed25519;
|
zsk lifetime P2M algorithm ed25519;
|
||||||
};
|
};
|
||||||
|
nsec3param "1 0 5 auto";
|
||||||
|
publish-safety 7d;
|
||||||
max-zone-ttl 86400;
|
max-zone-ttl 86400;
|
||||||
dnskey-ttl 3600;
|
dnskey-ttl 3600;
|
||||||
zone-propagation-delay 3600;
|
zone-propagation-delay 3600;
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue