set_dnssec
Configure DNSSEC for a domain by setting DS records or DNSKEYs, or clear it to disable validation. Supports key tags, digests, algorithms, and flags.
Instructions
Set or clear DNSSEC for a domain. Provide either a DS record (key_tag, digest_type, digest, algorithm) or a DNSKEY (flags, public_key, algorithm). To disable, set clear to true without key fields.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| clear | No | Set to true to remove DNSSEC from the domain | |
| flags | No | DNSSEC flags (e.g., '257' for KSK) | |
| digest | No | DS digest in hexadecimal | |
| domain | Yes | Domain name to configure DNSSEC for | |
| key_tag | No | DS key tag (0-65535) | |
| algorithm | No | DNSSEC algorithm number (e.g., '13' for ECDSAP256SHA256) | |
| public_key | No | DNSSEC public key | |
| digest_type | No | DS digest type: 1=SHA-1, 2=SHA-256, 3=GOST, 4=SHA-384 |