Tootfinder

I'd like to enable #DNSsec on my domains, but would like to keep my workflow of having zone files in /etc under etckeeper version control on a hidden primary. So far I'm using #knot, but that modifies my zone files in-place, which makes it hard to impossible to keep intentional zone file changes apart…

*sigh* it's always #DNS. It seems that my #turris has become a DNS memory hole again and just fails to fetch A records that it definitely should. Of all the components on it the #knot