doc/daemon: trust_anchors.keyfile_default

diff --git a/daemon/README.rst b/daemon/README.rst
index d479829e5992ec4ef0fab67db1dde1958d5b924d..8f45f0957246cef350f6aacd47494f87595aaf03 100644 (file)
--- a/daemon/README.rst
+++ b/daemon/README.rst
@@ -667,6 +667,11 @@ Trust anchors and DNSSEC
 
       [ ta ] key: 19036 state: Valid
 
+.. envvar:: trust_anchors.keyfile_default = KEYFILE_DEFAULT
+
+   Set by ``KEYFILE_DEFAULT`` during compilation (by default ``nil``). This can be explicitly
+   set to ``nil`` to override the value set during compilation in order to disable DNSSEC.
+
 .. envvar:: trust_anchors.hold_down_time = 30 * day
 
    :return: int (default: 30 * day)