From 77288f2f9f08c2334092ab1e26f7712ddb96231b Mon Sep 17 00:00:00 2001
From: =?utf8?q?Vladim=C3=ADr=20=C4=8Cun=C3=A1t?= <vladimir.cunat@nic.cz>
Date: Fri, 9 May 2025 08:50:21 +0200
Subject: [PATCH] datamodel/templates: fix `dnssec: false`

---
 NEWS                                                   | 8 ++++++++
 python/knot_resolver/datamodel/templates/dnssec.lua.j2 | 8 ++++++--
 2 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/NEWS b/NEWS
index d17bc1f95..b9fd76c42 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,11 @@
+Knot Resolver 6.0.13 (2025-05-dd)
+=================================
+
+Bugfixes
+--------
+- fix `dnssec: false` (!1687)
+
+
 Knot Resolver 6.0.12 (2025-04-24)
 =================================
 
diff --git a/python/knot_resolver/datamodel/templates/dnssec.lua.j2 b/python/knot_resolver/datamodel/templates/dnssec.lua.j2
index 05d1fa688..d6aed1715 100644
--- a/python/knot_resolver/datamodel/templates/dnssec.lua.j2
+++ b/python/knot_resolver/datamodel/templates/dnssec.lua.j2
@@ -3,7 +3,8 @@
 {% if not cfg.dnssec %}
 -- disable dnssec
 trust_anchors.remove('.')
-{% endif %}
+{% else %}
+
 
 -- options.trust-anchor-sentinel
 {% if cfg.dnssec.trust_anchor_sentinel %}
@@ -57,4 +58,7 @@ trust_anchors.set_insecure({
 {% for taf in cfg.dnssec.trust_anchors_files %}
 trust_anchors.add_file('{{ taf.file }}',  readonly = {{ boolean(taf.read_only) }})
 {% endfor %}
-{% endif %}
\ No newline at end of file
+{% endif %}
+
+
+{% endif %}{# cfg.dnssec #}
-- 
2.47.2