X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/cefb1fe9134e29ef41a021dc824d291407c94cb6..7f33734e863bf7ba1d1e4f1f1db208450b4cbb2b:/cookbooks/bind/templates/default/named.options.erb?ds=inline

diff --git a/cookbooks/bind/templates/default/named.options.erb b/cookbooks/bind/templates/default/named.options.erb
index ac4f32303..b175b6839 100644
--- a/cookbooks/bind/templates/default/named.options.erb
+++ b/cookbooks/bind/templates/default/named.options.erb
@@ -12,5 +12,14 @@ options {
 
 	# Listen on any IPv6 interfaces
 	listen-on-v6 { any; };
+
+	# Ensure dnssec validation is enabled using embedded trust anchors
+	dnssec-validation auto;
+
+	# Set reasonably memory limit for cache
+	max-cache-size 10%;
+
+	# Ensure dnssec synth is disabled
+	synth-from-dnssec no;
 };