Common daemon variables include:
| Variable | Meaning |
|---|---|
IP |
listen address |
PORT |
listen port |
DATA |
authoritative text or CDB path where supported |
ALLOW_NETS |
comma-separated client CIDRs for recursion or transfer |
DNSCACHEIP |
recursive endpoints used by client tools and ANAME flattening |
CACHESIZE |
bounded recursive response-cache capacity |
NSCACHESIZE |
bounded nameserver-cache entries |
RECURSION_LIMIT |
ordinary recursion depth |
NS_RECURSION_LIMIT |
nameserver-resolution recursion depth |
ROOT |
djbdns-compatible resolver configuration root |
DNSSEC_POLICY |
path to the one-line-per-zone K/U signing
policy |
The authoritative DNSSEC utilities compose without a manager process:
rgbsec-keygen zone keyfile
rgbsec-sign [data [data.signed]]
rgbsec-data [data [data.cdb]]
rgbsec-ds 'Kzone:keyfile:13:validity:refresh:skew'
rgbsec-check [data.cdb [dnssec-policy]]Use the command’s *-conf generator as a starting point,
then adapt the foreground run contract to the chosen native
supervisor.