Update docker.io/library/postgres Docker tag to v18

disable dnssec for catalog zones on auth-dns
Catalog zones are not real zones in the DNS hierarchy and don't have a parent zone. Therefore they will never have a valid DNSSEC delegation so we should skip signing those zones.
2026-05-19 09:16:10 +00:00 · 2026-05-19 11:01:52 +02:00
1 changed files with 1 additions and 2 deletions
--- a/roles/knot/templates/knot.conf.j2
+++ b/roles/knot/templates/knot.conf.j2
@ -67,8 +67,7 @@ template:
  # template for automatically created special zones
  - id: catalog
    catalog-role: generate
-    dnssec-signing: on
-    dnssec-policy: default
+    dnssec-signing: off


 # define zones on this server
Author	SHA1	Message	Date
Renovate	fc987709fd	Update docker.io/library/postgres Docker tag to v18 All checks were successful / Ansible Lint (push) Successful in 2m48s Details / Ansible Lint (pull_request) Successful in 2m55s Details	2026-05-19 09:16:10 +00:00
lilly	3541c68357	disable dnssec for catalog zones on auth-dns All checks were successful / Ansible Lint (push) Successful in 2m35s Details Catalog zones are not real zones in the DNS hierarchy and don't have a parent zone. Therefore they will never have a valid DNSSEC delegation so we should skip signing those zones.	2026-05-19 11:01:52 +02:00