updated settings.rst for direct-dnskey-signature

diff --git a/docs/settings.rst b/docs/settings.rst
index 506b24845651235add52adf6b839a2ee48634e0c..66e242d59c155b2886de2b867f628dc88489dbab 100644 (file)
--- a/docs/settings.rst
+++ b/docs/settings.rst
@@ -572,6 +572,17 @@ Configure a delay to send out notifications, no delay by default.
 Read additional DNSKEY, CDS and CDNSKEY records from the records table/your BIND zonefile. If not
 set, DNSKEY, CDS and CDNSKEY records in the zonefiles are ignored.
 
+.. _setting-direct-dnskey-signature:
+
+``direct-dnskey-signature``
+-----------------
+
+-  Boolean
+-  Default: no
+
+Read signatures of DNSKEY records directly from the backend. If not set and the record is not presigned, 
+DNSKEY records will be signed directly by PDNS Authoritative.
+
 .. _setting-disable-axfr:
 
 ``disable-axfr``