From: Tom Hughes <tom@compton.nu>
Date: Fri, 22 Mar 2019 16:52:31 +0000 (+0000)
Subject: Enable DNSSEC in allow-dowgrade mode
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/8a94d1b7d20117559660cd9984acca25abd4c4be

Enable DNSSEC in allow-dowgrade mode
---

diff --git a/cookbooks/networking/templates/default/resolved.conf.erb b/cookbooks/networking/templates/default/resolved.conf.erb
index efc4b2a71..f749388ef 100644
--- a/cookbooks/networking/templates/default/resolved.conf.erb
+++ b/cookbooks/networking/templates/default/resolved.conf.erb
@@ -1,3 +1,4 @@
 [Resolve]
 DNS=<%= node[:networking][:nameservers].join(" ") %>
 Domains=<%= node[:networking][:search].join(" ") %>
+DNSSEC=allow-downgrade