From 8a94d1b7d20117559660cd9984acca25abd4c4be Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Fri, 22 Mar 2019 16:52:31 +0000 Subject: [PATCH] Enable DNSSEC in allow-dowgrade mode --- cookbooks/networking/templates/default/resolved.conf.erb | 1 + 1 file changed, 1 insertion(+) diff --git a/cookbooks/networking/templates/default/resolved.conf.erb b/cookbooks/networking/templates/default/resolved.conf.erb index efc4b2a71..f749388ef 100644 --- a/cookbooks/networking/templates/default/resolved.conf.erb +++ b/cookbooks/networking/templates/default/resolved.conf.erb @@ -1,3 +1,4 @@ [Resolve] DNS=<%= node[:networking][:nameservers].join(" ") %> Domains=<%= node[:networking][:search].join(" ") %> +DNSSEC=allow-downgrade -- 2.43.2