add a way to pass "-k" to nsupdate, and document all options in the sample config...

[dyn-nsupdate.git] / dyn-nsupdate.conf.dist

diff --git a/dyn-nsupdate.conf.dist b/dyn-nsupdate.conf.dist
index d56bc78a1f63c7b4e0aa0f0bb282b1ca50603e96..2b2112f15dcfd581a4b51ca8f575f20340a3cd43 100644 (file)
--- a/dyn-nsupdate.conf.dist
+++ b/dyn-nsupdate.conf.dist
@@ -1,5 +1,12 @@
+# Full path to nsupdate binary
 nsupdate = /usr/bin/nsupdate
-key = keyname:passwd
+# You can change the port that will be used to talk to BIND (nsupdate "-p" option).
+#port = 53
+# If you need a key to authenticate updates, give its filename here (nsupdate "-k" option).
+#keyfile = /var/lib/bind/keys/zone.key
+# Alternatively, you can specify the name and secret of the key here (nsupdate "-y" option). Note that this is *discouraged* (see nsupdate man page for details).
+#key = keyname:passwd
 
+# Add one section per zone that can be updated, containing only the relevant password.
 [test.dyn.example.com]
 password = some_secure_password