Description: Do not set dnssec-enable
 This option was deprecated in Bind 9.15, and Bullseye has 9.16. In
 Bookworm, this even prevent Bind from starting. Let's completely get rid
 of this option alltogether.
Author: Thomas Goirand <zigo@debian.org>
Forwarded: no
Last-Update: 2023-02-20

--- puppet-module-theforeman-dns-5.4.0.orig/templates/options.conf.erb
+++ puppet-module-theforeman-dns-5.4.0/templates/options.conf.erb
@@ -8,7 +8,6 @@ forward <%= scope.lookupvar('::dns::forw
 
 recursion <%= scope.lookupvar('::dns::recursion') %>;
 allow-query { <%= scope.lookupvar('::dns::allow_query').join("; ") %>; };
-dnssec-enable <%= scope.lookupvar('::dns::dnssec_enable') %>;
 dnssec-validation <%= scope.lookupvar('::dns::dnssec_validation') %>;
 
 empty-zones-enable <%= scope.lookupvar('::dns::empty_zones_enable') %>;