From: Vladimír Čunát <vladimir.cunat@nic.cz>
Date: Fri, 9 May 2025 06:50:21 +0000 (+0200)
Subject: datamodel/templates: fix `dnssec: false`
X-Git-Tag: v6.0.13~10^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=77288f2f9f08c2334092ab1e26f7712ddb96231b;p=thirdparty%2Fknot-resolver.git

datamodel/templates: fix `dnssec: false`
---

diff --git a/NEWS b/NEWS
index d17bc1f95..b9fd76c42 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,11 @@
+Knot Resolver 6.0.13 (2025-05-dd)
+=================================
+
+Bugfixes
+--------
+- fix `dnssec: false` (!1687)
+
+
 Knot Resolver 6.0.12 (2025-04-24)
 =================================
 
diff --git a/python/knot_resolver/datamodel/templates/dnssec.lua.j2 b/python/knot_resolver/datamodel/templates/dnssec.lua.j2
index 05d1fa688..d6aed1715 100644
--- a/python/knot_resolver/datamodel/templates/dnssec.lua.j2
+++ b/python/knot_resolver/datamodel/templates/dnssec.lua.j2
@@ -3,7 +3,8 @@
 {% if not cfg.dnssec %}
 -- disable dnssec
 trust_anchors.remove('.')
-{% endif %}
+{% else %}
+
 
 -- options.trust-anchor-sentinel
 {% if cfg.dnssec.trust_anchor_sentinel %}
@@ -57,4 +58,7 @@ trust_anchors.set_insecure({
 {% for taf in cfg.dnssec.trust_anchors_files %}
 trust_anchors.add_file('{{ taf.file }}',  readonly = {{ boolean(taf.read_only) }})
 {% endfor %}
-{% endif %}
\ No newline at end of file
+{% endif %}
+
+
+{% endif %}{# cfg.dnssec #}