Enable DNSSEC in allow-dowgrade mode

diff --git a/cookbooks/networking/templates/default/resolved.conf.erb b/cookbooks/networking/templates/default/resolved.conf.erb
index efc4b2a7156fb65d85f635b7d1bed55c3d35fa72..f749388efeb216505933b5557fb337dc2a342309 100644 (file)
--- a/cookbooks/networking/templates/default/resolved.conf.erb
+++ b/cookbooks/networking/templates/default/resolved.conf.erb
@@ -1,3 +1,4 @@
 [Resolve]
 DNS=<%= node[:networking][:nameservers].join(" ") %>
 Domains=<%= node[:networking][:search].join(" ") %>
+DNSSEC=allow-downgrade