Update all stable non-major dependencies

disable dnssec for catalog zones on auth-dns
Catalog zones are not real zones in the DNS hierarchy and don't have a parent zone. Therefore they will never have a valid DNSSEC delegation so we should skip signing those zones.
2026-05-19 09:16:00 +00:00 · 2026-05-19 11:01:52 +02:00
2 changed files with 2 additions and 3 deletions
--- a/resources/chaosknoten/onlyoffice/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/onlyoffice/docker_compose/compose.yaml.j2
@ -4,7 +4,7 @@
 services:
  onlyoffice:
-    image: docker.io/onlyoffice/documentserver:9.3.1
+    image: docker.io/onlyoffice/documentserver:9.4.0
    restart: unless-stopped
    volumes:
      - "./onlyoffice/DocumentServer/logs:/var/log/onlyoffice"
--- a/roles/knot/templates/knot.conf.j2
+++ b/roles/knot/templates/knot.conf.j2
@ -67,8 +67,7 @@ template:
  # template for automatically created special zones
  - id: catalog
    catalog-role: generate
-    dnssec-signing: on
+    dnssec-signing: off
    dnssec-policy: default
 # define zones on this server
Author	SHA1	Message	Date
Renovate	c1d6e7163e	Update all stable non-major dependencies All checks were successful / Ansible Lint (pull_request) Successful in 3m5s Details / Ansible Lint (push) Successful in 3m7s Details	2026-05-19 09:16:00 +00:00
lilly	3541c68357	disable dnssec for catalog zones on auth-dns All checks were successful / Ansible Lint (push) Successful in 2m35s Details Catalog zones are not real zones in the DNS hierarchy and don't have a parent zone. Therefore they will never have a valid DNSSEC delegation so we should skip signing those zones.	2026-05-19 11:01:52 +02:00