Fixing UNBOUND_AGGRESSIVE_NSEC

bfren · Sep 15, 2023 · b0e1620 · b0e1620
1 parent 482a7c3
commit b0e1620
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/overlay/etc/bf/templates/unbound.conf.esh b/overlay/etc/bf/templates/unbound.conf.esh
@@ -515,7 +515,7 @@ server:
 
         # Aggressive NSEC uses the DNSSEC NSEC chain to synthesize NXDOMAIN
         # and other denials, using information from previous NXDOMAINs answers.
-        aggressive-nsec: <%= ${UNBOUND_AGGRESSIVE-NSEC:-yes} %>
+        aggressive-nsec: <%= ${UNBOUND_AGGRESSIVE_NSEC:-yes} %>
 
         # Use 0x20-encoded random bits in the query to foil spoof attempts.
         # This feature is an experimental implementation of draft dns-0x20.