X-Git-Url: https://git.sesse.net/?p=itkacl;a=blobdiff_plain;f=itkacl-2.1%2Fitkacl.conf;fp=itkacl-2.1%2Fitkacl.conf;h=4be7f0df32a5bbdf67c085f5bd78c0bfe5b87b84;hp=0000000000000000000000000000000000000000;hb=26201154db4a9dcc11a0b6b0e956580ce60f4f35;hpb=9edb4aeb4f7acadd82a52268c66c0d35d0b64f8a

diff --git a/itkacl-2.1/itkacl.conf b/itkacl-2.1/itkacl.conf
new file mode 100644
index 0000000..4be7f0d
--- /dev/null
+++ b/itkacl-2.1/itkacl.conf
@@ -0,0 +1,26 @@
+# Example /etc/itkacl.conf. These are the only accepted keywords currently.
+
+# What zone to look up results in.
+zone itkacl.as58302.net
+
+# Recommended.
+#
+# NOTE: For performance reasons, the library will read /etc/resolv.conf
+# and use the resolver there (if you have one). This means that
+# 
+#   a) Your recursive resolver(s) must support DNSSEC, too.
+#   b) You must trust the path between yourself and the resolvers.
+#
+# The simplest way to satisfy both of these is probably to run a local
+# instance of unbound or BIND, and then point resolv.conf to localhost.
+
+#require-dnssec
+
+# You need a trust anchor if you want DNSSEC to work. If you have working
+# DNSSEC delegation all the way from the root, you can generate this with:
+#
+#   sudo unbound-anchor -a /etc/unbound/root.key
+#
+# If not, you will need to add your own trust anchor in the right format here.
+
+#dnssec-public-key /etc/unbound/root.key