From f8faf4fe904e3dfa3b8e7447ae6f4d7f0f1ed26a Mon Sep 17 00:00:00 2001
From: Matthew <matt@souldo.net>
Date: Tue, 12 Sep 2023 13:18:25 -0500
Subject: [PATCH] moved dns sec as it is no longer used in bind9

---
 templates/named.conf.erb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/named.conf.erb b/templates/named.conf.erb
index a69f4ef..8e6bdce 100644
--- a/templates/named.conf.erb
+++ b/templates/named.conf.erb
@@ -28,13 +28,13 @@ options {
 <%- end -%>
 	auth-nxdomain <%= @auth_nxdomain ? 'yes' : 'no' %>;
 	listen-on-v6 { any; };
-	dnssec-enable <%= @dnssec ? 'yes' : 'no' %>;
 <%- if @filter_ipv6 -%>
 	filter-aaaa-on-v4 yes;
 <%- end -%>
 <%- if @dnssec -%>
 	dnssec-validation yes;
 	dnssec-lookaside auto;
+	dnssec-enable <%= @dnssec ? 'yes' : 'no' %>;
 <%-   if @isc_bind_keys -%>
         bindkeys-file "<%= @isc_bind_keys %>";
 <%-   end -%>