Enable DNSsec on our secondaries

[mirror/dsa-puppet.git] / modules / named / files / per-host / ravel.debian.org / named.conf.options-secondary

diff --git a/modules/named/files/per-host/ravel.debian.org/named.conf.options-secondary b/modules/named/files/per-host/ravel.debian.org/named.conf.options-secondary
index b396886..58e18dc 100644 (file)
--- a/modules/named/files/per-host/ravel.debian.org/named.conf.options-secondary
+++ b/modules/named/files/per-host/ravel.debian.org/named.conf.options-secondary
@@ -18,6 +18,9 @@ options {
 
        auth-nxdomain no;
        listen-on-v6 { any; };
+
+       dnssec-enable yes;
+       dnssec-validation yes;
 };
 
 logging {