feat(dnssec): ensure that zones are signed before sending out notifications

api/desecapi/models.py

@@ -109,7 +109,7 @@ class Domain(models.Model):
     def pdnsCreate(self):
         payload = {
             "name": self.name + ".",
-            "kind": "master",
+            "kind": "NATIVE",
             "masters": [],
             "nameservers": [
                 "ns1.desec.io.",

nslord/cronhook/secure-zones.sh

@@ -11,7 +11,7 @@ for ZONE in `(echo "SELECT name FROM domains WHERE id NOT IN(SELECT domain_id FR
 
 	PARENT=${ZONE#*.}
 	SALT=`head -c300 /dev/urandom | sha512sum | cut -b 1-16`
-	pdnsutil secure-zone $ZONE && pdnsutil set-nsec3 $ZONE "1 0 10 $SALT" && pdnsutil increase-serial $ZONE
+	pdnsutil secure-zone $ZONE && pdnsutil set-nsec3 $ZONE "1 0 10 $SALT" && pdnsutil set-kind $ZONE MASTER
 
 	if [ "$PARENT" == "dedyn.io" ]; then
 		filename=/tmp/`date -Ins`_$ZONE.log