From: Vladimír Čunát <vladimir.cunat@nic.cz>
Date: Wed, 11 Jun 2025 13:34:40 +0000 (+0200)
Subject: datamodel/templates: fix /dnssec/trust-anchors-files
X-Git-Tag: v6.0.15~13^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fenvironments%2Fdocs-trust-anchor-w0i9dl%2Fdeployments%2F7072;p=thirdparty%2Fknot-resolver.git

datamodel/templates: fix /dnssec/trust-anchors-files

I expect this has never worked in 6.x yet :-/
---

diff --git a/NEWS b/NEWS
index 4203a6585..226e97be4 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,7 @@ Bugfixes
 --------
 - manager: prometheus metrics update (!1703, #917)
   - added missing metrics split by IPv4 and IPv6
+- /dnssec/trust-anchors-files: fix resolver startup (!1704)
 
 
 Knot Resolver 6.0.14 (2025-06-03)
diff --git a/python/knot_resolver/datamodel/templates/dnssec.lua.j2 b/python/knot_resolver/datamodel/templates/dnssec.lua.j2
index d6aed1715..d0ad6ddba 100644
--- a/python/knot_resolver/datamodel/templates/dnssec.lua.j2
+++ b/python/knot_resolver/datamodel/templates/dnssec.lua.j2
@@ -56,7 +56,7 @@ trust_anchors.set_insecure({
 {% if cfg.dnssec.trust_anchors_files %}
 -- dnssec.trust-anchors-files
 {% for taf in cfg.dnssec.trust_anchors_files %}
-trust_anchors.add_file('{{ taf.file }}',  readonly = {{ boolean(taf.read_only) }})
+trust_anchors.add_file('{{ taf.file }}', {{ boolean(taf.read_only) }})
 {% endfor %}
 {% endif %}