From 6872bb87de3c557280137c55a91dc94e00a3065d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Sun, 25 May 2025 22:25:59 +0200
Subject: [PATCH 1/2] nixos/knot: add missing dnskey-sync settings sections

---
 nixos/modules/services/networking/knot.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nixos/modules/services/networking/knot.nix b/nixos/modules/services/networking/knot.nix
index 46634c5df494..a9a6b2800d88 100644
--- a/nixos/modules/services/networking/knot.nix
+++ b/nixos/modules/services/networking/knot.nix
@@ -61,6 +61,7 @@ let
           "remotes"
           "acl"
           "submission"
+          "dnskey-sync"
           "policy"
           "template"
           "zone"
@@ -101,6 +102,7 @@ let
             "remotes"
             "acl"
             "submission"
+            "dnskey-sync"
             "policy"
             "external"
           ]

From 107177ec1c15065686f170dd2887f3a6b04acba2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Vladim=C3=ADr=20=C4=8Cun=C3=A1t?= <v@cunat.cz>
Date: Tue, 18 Nov 2025 08:18:00 +0100
Subject: [PATCH 2/2] nixos/knot: fix incomplete settings sections (external +
 clear)

---
 nixos/modules/services/networking/knot.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/nixos/modules/services/networking/knot.nix b/nixos/modules/services/networking/knot.nix
index a9a6b2800d88..4cfdd9dab0b1 100644
--- a/nixos/modules/services/networking/knot.nix
+++ b/nixos/modules/services/networking/knot.nix
@@ -63,9 +63,12 @@ let
           "submission"
           "dnskey-sync"
           "policy"
+          "external"
+          # mod-* is above
           "template"
           "zone"
           "include"
+          "clear"
         ];
       secsCheck =
         let