The statements that already exist in the grammar can't be created with
the namedconf:statement. Use a plain definition list for these
statements and add a manual anchor for each one so links to them can be
created.
Avoid using the :any: syntax in the definition lists, as that just
creates a link to the duplicate and completely unrelated statement,
which just makes the documentation more confusing.
This indicates the TTL to use when generating DNSKEY resource
records. The default is 1 hour (3600 seconds).
-:any:`inline-signing`
+.. _dnssec-policy-inline-signing:
+
+inline-signing
:tags: dnssec
:short: Specifies whether BIND 9 maintains a separate signed version of a zone.
This behavior is enabled by default.
-.. keys
+.. _dnssec-policy-keys:
+
+keys
:tags: dnssec
:short: Specifies the type of keys to be used for DNSSEC signing.
This is similar to :any:`signatures-validity`, but for DNSKEY records.
The default is ``P2W`` (2 weeks).
-:any:`max-zone-ttl`
+.. _dnssec-policy-max-zone-ttl:
+
+max-zone-ttl
:tags: zone, query
:short: Specifies a maximum permissible time-to-live (TTL) value, in seconds.