From: Peter Palfrader <peter@palfrader.org>
Date: Sun, 14 Feb 2010 19:19:43 +0000 (+0100)
Subject: Enable DNSsec on our secondaries
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=95667ea99af27b67bce5097c39d135a3155a1a9f;p=mirror%2Fdsa-puppet.git

Enable DNSsec on our secondaries
---

diff --git a/modules/named/files/common/named.conf.options b/modules/named/files/common/named.conf.options
index b81be8c87..8d81ba42c 100644
--- a/modules/named/files/common/named.conf.options
+++ b/modules/named/files/common/named.conf.options
@@ -26,6 +26,9 @@ options {
         allow-transfer { none; };
         allow-recursion { Nagios; };
         blackhole { 192.168.0.0/16; 10.0.0.0/8; 172.16.0.0/12; };
+
+	dnssec-enable yes;
+	dnssec-validation yes;
 };
 
 logging {