unbound: Update trust anchor once a day

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/config/cron/crontab b/config/cron/crontab
index c42c65080899216bc4c90f86bbd10200879faf4f..c6d8a725c73ec49c76a3cb807f31aed121654029 100644 (file)
--- a/config/cron/crontab
+++ b/config/cron/crontab
@@ -67,3 +67,6 @@ HOME=/
 
 # Cleanup the mail spool directory
 %weekly * * /usr/sbin/dma-cleanup-spool
+
+# Update DNS trust anchor
+%daily,random * * @runas(nobody) /usr/sbin/unbound-anchor -a /var/lib/unbound/root.key -c /etc/unbound/icannbundle.pem