bind: dnssec-enable has been the default for a while

diff --git a/roles/bind/templates/named.conf.options b/roles/bind/templates/named.conf.options
index 7ed35ed43cb2b254dbbc25d94ba1746cbff37b1b..8f7a7803c0773f83a190f6bcfcf3b8480b41d0e2 100644 (file)
--- a/roles/bind/templates/named.conf.options
+++ b/roles/bind/templates/named.conf.options
@@ -8,7 +8,6 @@ options {
        key-directory "/var/lib/bind/keys";
 
        recursion no;
        key-directory "/var/lib/bind/keys";
 
        recursion no;

-       dnssec-enable yes;

        sig-validity-interval 14;
 
        auth-nxdomain no;    # conform to RFC1035
        sig-validity-interval 14;
 
        auth-nxdomain no;    # conform to RFC1035