DNSSEC for OpenPanel domains

[stefanpejcic]

Description

DNSSEC can be enabled and used from the terminal:

• to enable dnssec for example.net :

  bash <(curl -sSL https://gist.githubusercontent.com/stefanpejcic/e229cb6911b39776cfe7a11991ee073f/raw/6ec9cd2f62834ff2baaa0af4b6047825a116d2f1/domains_dnssec.sh) example.com

• to update the zone after publishing new records:

  bash <(curl -sSL https://gist.githubusercontent.com/stefanpejcic/e229cb6911b39776cfe7a11991ee073f/raw/6ec9cd2f62834ff2baaa0af4b6047825a116d2f1/domains_dnssec.sh) example.com  --update

• to check if domain has dnssec enabled and view DS records:

  bash <(curl -sSL https://gist.githubusercontent.com/stefanpejcic/e229cb6911b39776cfe7a11991ee073f/raw/6ec9cd2f62834ff2baaa0af4b6047825a116d2f1/domains_dnssec.sh) example.com  --check

• Source: https://pcx3.com/free-openpanel/setting-dnssec-for-domains-in-openpanel/

---

To now incorporate DNSEC in OpenPanel interface we need to:

• Add a new route to openpanel to allow user to enable/disable dnssec *(maybe even download the key)
• add a page to show the ds records when dnsseec is enabled
• on every change in the zone check if it has dnssec, if it does, re-sign the zone in background
• on domain deletion, remove signed zone file, key pairs and DS records
• extend backups to include keys, ds record and signed zone