Sign _openpgpkey.debian.org

diff --git a/modules/named/manifests/primary.pp b/modules/named/manifests/primary.pp
index ecb5f9b..75d50d2 100644 (file)
--- a/modules/named/manifests/primary.pp
+++ b/modules/named/manifests/primary.pp
@@ -41,6 +41,11 @@ class named::primary inherits named::authoritative {
                                };
                                also-notify {
                                };
+
+                               key-directory "/srv/dns.debian.org/var/keys/_openpgpkey.debian.org";
+                               sig-validity-interval 40 25;
+                               auto-dnssec maintain;
+                               inline-signing yes;
                        };
                        | EOF
        }