mirror of
https://github.com/StackExchange/dnscontrol.git
synced 2024-09-20 14:56:20 +08:00
3c41a39252
There's a philosophy issue here around what is the Bind output meant to do. Since AFAIK we're not integrating into Bind's catalog zones or the like, we're just targeting the zonefiles, we're not in a position to do _anything_ relating to registrar options such as setting up DS glue. So at one level, enabling AutoDNSSEC for Bind is a lie. But without this, folks can't target a Bind zone as a secondary provider for their domain, to get debug dumps of the zone output, because the checks for "Can" block it. So I think this commit achieves a happy compromise: we write a comment into the Bind zonefile, indicating that DNSSEC was requested. Actually: we add support for arbitrary zone comments to be written into a zonefile via a slightly ugly "can be `nil`" parameter. We then write in a generation timestamp comment, and if AutoDNSSEC was requested we then write that in too. |
||
|---|---|---|
| .. | ||
| _functions | ||
| _includes | ||
| _layouts | ||
| _providers | ||
| assets | ||
| css | ||
| flattener | ||
| public | ||
| _config.yml | ||
| adding-new-rtypes.md | ||
| alias.md | ||
| bug-triage.md | ||
| caa-builder.md | ||
| examples.md | ||
| get-certs.md | ||
| get-zones.md | ||
| getting-started.md | ||
| index.md | ||
| js.md | ||
| migrating.md | ||
| nameservers.md | ||
| notifications.md | ||
| opinions.md | ||
| provider-list.md | ||
| release-engineering.md | ||
| runDocker.sh | ||
| spf-optimizer.md | ||
| toc.md | ||
| unittests.md | ||
| why-the-dot.md | ||
| writing-providers.md | ||