1 <?xml version="1.0" encoding="UTF-8"?>
5 <Repository name="SoftHSM">
6 <Module>/usr/lib/libsofthsm.so</Module>
7 <TokenLabel>OpenDNSSEC</TokenLabel>
15 <Syslog><Facility>local0</Facility></Syslog>
18 <PolicyFile>/etc/opendnssec/kasp.xml</PolicyFile>
19 <ZoneListFile>/etc/opendnssec/zonelist.xml</ZoneListFile>
22 <ZoneFetchFile>/etc/opendnssec/zonefetch.xml</ZoneFetchFile>
28 <User>opendnssec</User>
29 <Group>opendnssec</Group>
32 <Datastore><SQLite>/var/lib/opendnssec/kasp.db</SQLite></Datastore>
33 <Interval>PT3600S</Interval>
34 <!-- <ManualKeyGeneration/> -->
35 <!-- <RolloverNotification>P14D</RolloverNotification> -->
37 <!-- the <DelegationSignerSubmitCommand> will get all current
38 DNSKEYs (as a RRset) on standard input
40 <!-- <DelegationSignerSubmitCommand>/usr/sbin/eppclient</DelegationSignerSubmitCommand> -->
45 <User>opendnssec</User>
46 <Group>opendnssec</Group>
49 <WorkingDirectory>/var/lib/opendnssec/tmp</WorkingDirectory>
50 <WorkerThreads>4</WorkerThreads>
52 <SignerThreads>4</SignerThreads>
55 <!-- the <NotifyCommmand> will expand the following variables:
57 %zone the name of the zone that was signed
58 %zonefile the filename of the signed zone
61 <NotifyCommand>/usr/local/bin/my_nameserver_reload_command</NotifyCommand>
64 <NotifyCommand>/usr/sbin/rndc reload %zone</NotifyCommand>
71 <User>opendnssec</User>
72 <Group>opendnssec</Group>
76 <WorkingDirectory>/var/lib/opendnssec/tmp</WorkingDirectory>