PowerDNS resolver does now enforce YAML config styling

Signed-off-by: DL6ER <dl6er@dl6er.de>
This commit is contained in:
DL6ER
2025-05-31 21:01:47 +02:00
parent 2fc6a64242
commit 47a0d7f3f4

View File

@@ -7,20 +7,31 @@
# This file is copyright under the latest version of the EUPL. # This file is copyright under the latest version of the EUPL.
# Please see LICENSE file for your rights under this license. # Please see LICENSE file for your rights under this license.
# Local DNS address and port dnssec:
local-address=127.0.0.1:5555 validation: process-no-validate
incoming:
# Use authoritative server for ftl., dnssec. and arpa. zones listen:
forward-zones=ftl=127.0.0.1:5554,168.192.in-addr.arpa=127.0.0.1:5554,ip6.arpa=127.0.0.1:5554,dnssec=127.0.0.1:5554,bogus=127.0.0.1:5554 - 127.0.0.1:5555
recursor:
# In this mode the Recursor acts as a “security aware, non-validating” forward_zones:
# nameserver, meaning it will set the DO-bit on outgoing queries and will - zone: ftl
# provide DNSSEC related RRsets (NSEC, RRSIG) to clients that ask for them (by recurse: false
# means of a DO-bit in the query), except for zones provided through the forwarders:
# auth-zones setting. It will not do any validation in this mode, not even when - 127.0.0.1:5554
# requested by the client. - zone: 168.192.in-addr.arpa
# The default mode until PowerDNS Recursor 4.5.0. recurse: false
dnssec=process-no-validate forwarders:
- 127.0.0.1:5554
# Enable LUA support - zone: ip6.arpa
lua-dns-script=/etc/pdns/luadns.lua recurse: false
forwarders:
- 127.0.0.1:5554
- zone: dnssec
recurse: false
forwarders:
- 127.0.0.1:5554
- zone: bogus
recurse: false
forwarders:
- 127.0.0.1:5554
lua_dns_script: /etc/pdns/luadns.lua