Enable DNSsec on our secondaries

diff --git a/modules/named/files/common/named.conf.options-secondary b/modules/named/files/common/named.conf.options-secondary
index f3c6a4c..e95a728 100644 (file)
--- a/modules/named/files/common/named.conf.options-secondary
+++ b/modules/named/files/common/named.conf.options-secondary
@@ -11,6 +11,9 @@ options {
 
        auth-nxdomain no;
        listen-on-v6 { any; };
+
+       dnssec-enable yes;
+       dnssec-validation yes;
 };
 
 logging {

diff --git a/modules/named/files/per-host/ravel.debian.org/named.conf.options-secondary b/modules/named/files/per-host/ravel.debian.org/named.conf.options-secondary
index b396886..58e18dc 100644 (file)
--- a/modules/named/files/per-host/ravel.debian.org/named.conf.options-secondary
+++ b/modules/named/files/per-host/ravel.debian.org/named.conf.options-secondary
@@ -18,6 +18,9 @@ options {
 
        auth-nxdomain no;
        listen-on-v6 { any; };
+
+       dnssec-enable yes;
+       dnssec-validation yes;
 };
 
 logging {