datamodel/templates: fix /dnssec/trust-anchors-files

I expect this has never worked in 6.x yet :-/

diff --git a/NEWS b/NEWS
index 4203a6585491cf4b98bf22a60fb7d04d90b1d73f..226e97be421babd4b22cba205dc503711ebb75ac 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,7 @@ Bugfixes
 --------
 - manager: prometheus metrics update (!1703, #917)
   - added missing metrics split by IPv4 and IPv6
+- /dnssec/trust-anchors-files: fix resolver startup (!1704)
 
 
 Knot Resolver 6.0.14 (2025-06-03)

diff --git a/python/knot_resolver/datamodel/templates/dnssec.lua.j2 b/python/knot_resolver/datamodel/templates/dnssec.lua.j2
index d6aed17157c6bf086a46c42af09eb3e985a387ea..d0ad6ddbabc9beed2031a67e60b317eff7998308 100644 (file)
--- a/python/knot_resolver/datamodel/templates/dnssec.lua.j2
+++ b/python/knot_resolver/datamodel/templates/dnssec.lua.j2
@@ -56,7 +56,7 @@ trust_anchors.set_insecure({
 {% if cfg.dnssec.trust_anchors_files %}
 -- dnssec.trust-anchors-files
 {% for taf in cfg.dnssec.trust_anchors_files %}
-trust_anchors.add_file('{{ taf.file }}',  readonly = {{ boolean(taf.read_only) }})
+trust_anchors.add_file('{{ taf.file }}', {{ boolean(taf.read_only) }})
 {% endfor %}
 {% endif %}