Hi Ondrej,
Thanks for your fast answer!
my configuration looks like this:
```
template:
- id: "default"
storage: "/var/lib/knot"
zonefile-sync: "0"
dnssec-signing: "on"
kasp-db: "/etc/knot/keys"
serial-policy: "unixtime"
notify: [ "trubka" ]
acl: [ "acl_trubka" ]
file: "/etc/knot/zones/%s"
```
We don't have an option to write signed zonefile elsewhere, but you can set
`zonefile-sync: -1`[1] to disable syncing of the zones to the disk. That
way the signatures will be kept only in the zone journal.
1.
https://www.knot-dns.cz/docs/2.0/html/reference.html#zonefile-sync
That's great! This solves all of my "troubles" I had...
Cheers,
Tobias