Mercurial > prosody-hg

diff util/prosodyctl/check.lua @ 14216:2ec517d8d43e

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
net.unbound: Enable DNSSEC by default with option for turning off You know what they say about opt-in security. Enabling DNSSEC in libunbound without a way to turn it off would likely be a problem for those whose DNS resolvers do not support, or outright block DNSSEC. The merge algorithm already in place here doesn't have a way to unset something, so instead a simpler boolean setting is introduced, similar to some existing ones like use_ipv6/4 and use_dane.
author Kim Alvefur <zash@zash.se>
date Sun, 07 Jun 2026 20:32:55 +0200
parents 70b08435e47b
children 565debd9c37a
line wrap: on
line diff
--- a/util/prosodyctl/check.lua	Sun Jun 07 18:23:24 2026 +0200
+++ b/util/prosodyctl/check.lua	Sun Jun 07 20:32:55 2026 +0200
@@ -468,6 +468,7 @@
 			"trusted_proxies",
 			"umask",
 			"use_dane",
+			"use_dnssec",
 			"use_ipv4",
 			"use_ipv6",
 			"websocket_frame_buffer_limit",