BRs for tar.xz source

[packages/bind.git] / bind-named.conf

diff --git a/bind-named.conf b/bind-named.conf
index 435038a743fe1081dd9b87593515f6c66b4a3d2f..7968c2b4da7bd494f0a1ed5119ac2427e8ce78fd 100644 (file)
--- a/bind-named.conf
+++ b/bind-named.conf
@@ -1,17 +1,27 @@
 // This is an exaple configuration file for named ( /etc/named.conf ) 
-// Przyk³adowy plik konfiguracyjny /etc/named.conf dla serwera nazw `named'
 
 options {
        directory "/";
        pid-file "named.pid";
        auth-nxdomain yes;
        datasize default;
-// Uncoment these to enable IPv6 connections support
-// IPv4 will still work
-//     listen-on { none; };
+// For IPv4 and IPv6 uncoment listen-on and listen-on-v6 entries.
+// Regular DNS
+//     listen-on { any; };
+// DNS-over-TLS (DoT)
+//     listen-on tls ephemeral { any; };
+// DNS-over-HTTPS (DoH)
+//     listen-on tls ephemeral http local { any; };
 //     listen-on-v6 { any; };
+//     listen-on-v6 tls ephemeral { any; };
+//     listen-on-v6 tls ephemeral http local { any; };
 
-       dnssec-validation yes;  # enable DNSSEC validation
+//     dnssec-enable yes;      # enable DNSSEC, default yes
+       dnssec-validation auto;  # enable DNSSEC validation with the key from bind.keys
+};
+
+http local {
+    endpoints { "/dns-query"; };
 };
 
 zone "localhost" IN {
@@ -55,14 +65,3 @@ logging {
         category xfer-out { xfer-log; };
         category notify { xfer-log; };
 };
-
-managed-keys {
-    "." initial-key 257 3 8
-       "AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF
-        FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX
-        bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD
-        X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz
-        W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS
-        Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq
-        QxA+Uk1ihz0=";
-};