docker_bind/cfg/named.dnssec.conf

dnssec-policy "simple_alg15" {
    dnskey-ttl 7200;
    keys {
        csk lifetime unlimited algorithm ed25519;
    };
    nsec3param iterations 0 optout no salt-length 0;
};

dnssec-policy "default_alg13" {
    dnskey-ttl 86400;
    keys {
        ksk lifetime unlimited algorithm 13;
        zsk lifetime P90D algorithm 13;
    };
}