From 66658778bdcf4dc97c9918bfc5c765392fddb642 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Vladim=C3=ADr=20=C4=8Cun=C3=A1t?= <v@cunat.cz>
Date: Thu, 18 Sep 2025 13:09:46 +0200
Subject: [PATCH] knot-dns: 3.4.8 -> 3.5.0

https://gitlab.nic.cz/knot/knot-dns/-/releases/v3.5.0#knot-dns-350-2025-09-18
---
 nixos/modules/services/networking/knot.nix | 3 ++-
 pkgs/by-name/kn/knot-dns/package.nix       | 6 +++---
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/nixos/modules/services/networking/knot.nix b/nixos/modules/services/networking/knot.nix
index 9702dfdbcb2c..46634c5df494 100644
--- a/nixos/modules/services/networking/knot.nix
+++ b/nixos/modules/services/networking/knot.nix
@@ -81,7 +81,7 @@ let
           # We output the config section in the upstream-mandated order.
           # Ordering is important due to forward-references not being allowed.
           # See definition of conf_export and 'const yp_item_t conf_schema'
-          # upstream for reference.  Last updated for 3.3.
+          # upstream for reference.  Last updated for 3.5.
           # When changing the set of sections, also update secAllow above.
           [ (sec_list_fa "id" nix_def "module") ]
           ++ map (sec_plain nix_def) [
@@ -102,6 +102,7 @@ let
             "acl"
             "submission"
             "policy"
+            "external"
           ]
 
           # Export module sections before the template section.
diff --git a/pkgs/by-name/kn/knot-dns/package.nix b/pkgs/by-name/kn/knot-dns/package.nix
index fba4e166463d..969b6aa87121 100644
--- a/pkgs/by-name/kn/knot-dns/package.nix
+++ b/pkgs/by-name/kn/knot-dns/package.nix
@@ -33,11 +33,11 @@
 
 stdenv.mkDerivation rec {
   pname = "knot-dns";
-  version = "3.4.8";
+  version = "3.5.0";
 
   src = fetchurl {
     url = "https://secure.nic.cz/files/knot-dns/knot-${version}.tar.xz";
-    sha256 = "sha256-ZzCnPb/BLXnYAA/+ItNtBot0Z+dL7h6xIqxJNezqSfk=";
+    sha256 = "d52538bf7364c280999dec58c2a02a405dd922ef5794da1473ca7c3cf7f01277";
   };
 
   outputs = [
@@ -133,7 +133,7 @@ stdenv.mkDerivation rec {
     description = "Authoritative-only DNS server from .cz domain registry";
     homepage = "https://knot-dns.cz";
     changelog = "https://gitlab.nic.cz/knot/knot-dns/-/releases/v${version}";
-    license = lib.licenses.gpl3Plus;
+    license = lib.licenses.gpl2Plus;
     platforms = lib.platforms.unix;
     maintainers = [ lib.maintainers.vcunat ];
     mainProgram = "knotd";