netbox-plugin-dns 1.2.6__py3-none-any.whl → 1.2.7__py3-none-any.whl

netbox_dns/forms/zone.py

@@ -23,7 +23,7 @@ from utilities.forms.fields import (
     DynamicModelChoiceField,
 )
 from utilities.release import load_release_data
-from utilities.forms.widgets import BulkEditNullBooleanSelect
+from utilities.forms.widgets import BulkEditNullBooleanSelect, DatePicker
 from utilities.forms.rendering import FieldSet
 from utilities.forms import BOOLEAN_WITH_BLANK_CHOICES, add_blank_choice
 from tenancy.models import Tenant, TenantGroup
@@ -36,8 +36,9 @@ from netbox_dns.models import (
     Registrar,
     RegistrationContact,
     ZoneTemplate,
+    DNSSECPolicy,
 )
-from netbox_dns.choices import ZoneStatusChoices
+from netbox_dns.choices import ZoneStatusChoices, ZoneEPPStatusChoices
 from netbox_dns.utilities import name_to_unicode, network_to_reverse
 from netbox_dns.fields import RFC2317NetworkFormField, TimePeriodField
 from netbox_dns.validators import validate_ipv4, validate_prefix, validate_rfc2317
@@ -58,10 +59,21 @@ class RollbackTransaction(Exception):
 
 
 class ZoneTemplateUpdateMixin:
+    def _check_soa_mname(self):
+        if (
+            self.cleaned_data.get("soa_mname") is None
+            and "soa_mname" in self.fields.keys()
+        ):
+            self.add_error(
+                "soa_mname",
+                _("soa_mname not set and no template or default value defined"),
+            )
+
     def clean(self, *args, **kwargs):
         super().clean(*args, **kwargs)
 
         if (template := self.cleaned_data.get("template")) is None:
+            self._check_soa_mname()
             return
 
         if not self.cleaned_data.get("nameservers") and template.nameservers.all():
@@ -76,11 +88,7 @@ class ZoneTemplateUpdateMixin:
             ) not in (None, ""):
                 self.cleaned_data[field] = getattr(template, field)
 
-        if self.cleaned_data.get("soa_mname") is None:
-            self.add_error(
-                "soa_mname",
-                _("soa_mname not set and no template or default value defined"),
-            )
+        self._check_soa_mname()
 
         if self.errors:
             return
@@ -271,6 +279,11 @@ class ZoneForm(ZoneTemplateUpdateMixin, TenancyForm, NetBoxModelForm):
             "soa_serial",
             name=_("SOA"),
         ),
+        FieldSet(
+            "dnssec_policy",
+            "inline_signing",
+            name=_("DNSSEC"),
+        ),
         FieldSet(
             "rfc2317_prefix",
             "rfc2317_parent_managed",
@@ -279,6 +292,8 @@ class ZoneForm(ZoneTemplateUpdateMixin, TenancyForm, NetBoxModelForm):
         FieldSet(
             "registrar",
             "registry_domain_id",
+            "expiration_date",
+            "domain_status",
             "registrant",
             "admin_c",
             "tech_c",
@@ -369,8 +384,12 @@ class ZoneForm(ZoneTemplateUpdateMixin, TenancyForm, NetBoxModelForm):
             "soa_minimum",
             "rfc2317_prefix",
             "rfc2317_parent_managed",
+            "dnssec_policy",
+            "inline_signing",
             "registrar",
             "registry_domain_id",
+            "expiration_date",
+            "domain_status",
             "registrant",
             "admin_c",
             "tech_c",
@@ -379,8 +398,8 @@ class ZoneForm(ZoneTemplateUpdateMixin, TenancyForm, NetBoxModelForm):
             "tenant",
             "tags",
         )
-        help_texts = {
-            "soa_mname": _("Primary nameserver for the zone"),
+        widgets = {
+            "expiration_date": DatePicker,
         }
 
 
@@ -403,6 +422,11 @@ class ZoneFilterForm(TenancyFilterForm, NetBoxModelFilterSetForm):
             "soa_serial_auto",
             name=_("SOA"),
         ),
+        FieldSet(
+            "dnssec_policy_id",
+            "inline_signing",
+            name=_("DNSSEC"),
+        ),
         FieldSet(
             "rfc2317_prefix",
             "rfc2317_parent_managed",
@@ -412,6 +436,9 @@ class ZoneFilterForm(TenancyFilterForm, NetBoxModelFilterSetForm):
         FieldSet(
             "registrar_id",
             "registry_domain_id",
+            "expiration_date_before",
+            "expiration_date_after",
+            "domain_status",
             "registrant_id",
             "admin_c_id",
             "tech_c_id",
@@ -438,6 +465,7 @@ class ZoneFilterForm(TenancyFilterForm, NetBoxModelFilterSetForm):
     nameserver_id = DynamicModelMultipleChoiceField(
         queryset=NameServer.objects.all(),
         required=False,
+        null_option=_("None"),
         label=_("Nameservers"),
     )
     active = forms.NullBooleanField(
@@ -475,35 +503,67 @@ class ZoneFilterForm(TenancyFilterForm, NetBoxModelFilterSetForm):
     rfc2317_parent_zone_id = DynamicModelMultipleChoiceField(
         queryset=Zone.objects.all(),
         required=False,
+        null_option=_("None"),
         label=_("Parent Zone"),
     )
+    dnssec_policy_id = DynamicModelMultipleChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        null_option=_("None"),
+        label=_("DNSSEC Policy"),
+    )
+    inline_signing = forms.NullBooleanField(
+        required=False,
+        widget=forms.Select(choices=BOOLEAN_WITH_BLANK_CHOICES),
+        label=_("Use Inline Signing"),
+    )
     registrar_id = DynamicModelMultipleChoiceField(
         queryset=Registrar.objects.all(),
         required=False,
+        null_option=_("None"),
         label=_("Registrar"),
     )
     registry_domain_id = forms.CharField(
         required=False,
         label=_("Registry Domain ID"),
     )
+    expiration_date_after = forms.DateField(
+        required=False,
+        label=_("Expiration Date after"),
+        widget=DatePicker,
+    )
+    expiration_date_before = forms.DateField(
+        required=False,
+        label=_("Expiration Date before"),
+        widget=DatePicker,
+    )
+    domain_status = forms.MultipleChoiceField(
+        choices=ZoneEPPStatusChoices,
+        required=False,
+        label=_("Domain Status"),
+    )
     registrant_id = DynamicModelMultipleChoiceField(
         queryset=RegistrationContact.objects.all(),
         required=False,
+        null_option=_("None"),
         label=_("Registrant"),
     )
     admin_c_id = DynamicModelMultipleChoiceField(
         queryset=RegistrationContact.objects.all(),
         required=False,
+        null_option=_("None"),
         label=_("Administrative Contact"),
     )
     tech_c_id = DynamicModelMultipleChoiceField(
         queryset=RegistrationContact.objects.all(),
         required=False,
+        null_option=_("None"),
         label=_("Technical Contact"),
     )
     billing_c_id = DynamicModelMultipleChoiceField(
         queryset=RegistrationContact.objects.all(),
         required=False,
+        null_option=_("None"),
         label=_("Billing Contact"),
     )
     tag = TagFilterField(Zone)
@@ -594,6 +654,19 @@ class ZoneImportForm(ZoneTemplateUpdateMixin, NetBoxModelImportForm):
         ),
         label=_("RFC2317 Parent Managed"),
     )
+    dnssec_policy = CSVModelChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        to_field_name="name",
+        error_messages={
+            "invalid_choice": _("DNSSEC policy %(value)s not found"),
+        },
+        label=_("DNSSEC Policy"),
+    )
+    inline_signing = forms.BooleanField(
+        required=False,
+        label=_("Use Inline Signing"),
+    )
     registrar = CSVModelChoiceField(
         queryset=Registrar.objects.all(),
         required=False,
@@ -607,6 +680,11 @@ class ZoneImportForm(ZoneTemplateUpdateMixin, NetBoxModelImportForm):
         required=False,
         label=_("Registry Domain ID"),
     )
+    domain_status = CSVChoiceField(
+        choices=ZoneEPPStatusChoices,
+        required=False,
+        label=_("Domain Status"),
+    )
     registrant = CSVModelChoiceField(
         queryset=RegistrationContact.objects.all(),
         required=False,
@@ -676,10 +754,14 @@ class ZoneImportForm(ZoneTemplateUpdateMixin, NetBoxModelImportForm):
             "soa_retry",
             "soa_expire",
             "soa_minimum",
+            "dnssec_policy",
+            "inline_signing",
             "rfc2317_prefix",
             "rfc2317_parent_managed",
             "registrar",
             "registry_domain_id",
+            "expiration_date",
+            "domain_status",
             "registrant",
             "admin_c",
             "tech_c",
@@ -794,6 +876,16 @@ class ZoneBulkEditForm(NetBoxModelBulkEditForm):
         ),
         label=_("RFC2317 Parent Managed"),
     )
+    dnssec_policy = DynamicModelChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        label=_("DNSSEC Policy"),
+    )
+    inline_signing = forms.NullBooleanField(
+        required=False,
+        widget=BulkEditNullBooleanSelect(),
+        label=_("Use Inline Signing"),
+    )
     registrar = DynamicModelChoiceField(
         queryset=Registrar.objects.all(),
         required=False,
@@ -803,6 +895,16 @@ class ZoneBulkEditForm(NetBoxModelBulkEditForm):
         required=False,
         label=_("Registry Domain ID"),
     )
+    expiration_date = forms.DateField(
+        required=False,
+        label=_("Expiration Date"),
+        widget=DatePicker,
+    )
+    domain_status = forms.ChoiceField(
+        choices=add_blank_choice(ZoneEPPStatusChoices),
+        required=False,
+        label=_("Domain Status"),
+    )
     registrant = DynamicModelChoiceField(
         queryset=RegistrationContact.objects.all(),
         required=False,
@@ -857,6 +959,11 @@ class ZoneBulkEditForm(NetBoxModelBulkEditForm):
             "soa_serial",
             name=_("SOA"),
         ),
+        FieldSet(
+            "dnssec_policy",
+            "inline_signing",
+            name=_("DNSSEC"),
+        ),
         FieldSet(
             "rfc2317_prefix",
             "rfc2317_parent_managed",
@@ -865,6 +972,8 @@ class ZoneBulkEditForm(NetBoxModelBulkEditForm):
         FieldSet(
             "registrar",
             "registry_domain_id",
+            "expiration_date",
+            "domain_status",
             "registrant",
             "admin_c",
             "tech_c",
@@ -879,6 +988,8 @@ class ZoneBulkEditForm(NetBoxModelBulkEditForm):
         "nameservers",
         "rfc2317_prefix",
         "registrar",
+        "expiration_date",
+        "domain_status",
         "registry_domain_id",
         "registrant",
         "admin_c",

netbox_dns/forms/zone_template.py

@@ -27,6 +27,7 @@ from netbox_dns.models import (
     NameServer,
     Registrar,
     RegistrationContact,
+    DNSSECPolicy,
 )
 
 
@@ -62,6 +63,7 @@ class ZoneTemplateForm(TenancyForm, NetBoxModelForm):
         FieldSet("name", "description", "nameservers", name=_("Zone Template")),
         FieldSet("soa_mname", "soa_rname", name=_("SOA")),
         FieldSet("record_templates", name=_("Record Templates")),
+        FieldSet("dnssec_policy", name=_("DNSSEC")),
         FieldSet(
             "registrar",
             "registrant",
@@ -82,6 +84,7 @@ class ZoneTemplateForm(TenancyForm, NetBoxModelForm):
             "nameservers",
             "soa_mname",
             "soa_rname",
+            "dnssec_policy",
             "record_templates",
             "description",
             "registrar",
@@ -105,6 +108,7 @@ class ZoneTemplateFilterForm(TenancyFilterForm, NetBoxModelFilterSetForm):
         FieldSet("name", "nameserver_id", "description", name=_("Attributes")),
         FieldSet("soa_mname_id", "soa_rname", name=_("SOA")),
         FieldSet("record_template_id", name=_("Record Templates")),
+        FieldSet("dnssec_policy", name=_("DNSSEC")),
         FieldSet(
             "registrar_id",
             "registrant_id",
@@ -123,11 +127,13 @@ class ZoneTemplateFilterForm(TenancyFilterForm, NetBoxModelFilterSetForm):
     nameserver_id = DynamicModelMultipleChoiceField(
         queryset=NameServer.objects.all(),
         required=False,
+        null_option=_("None"),
         label=_("Nameservers"),
     )
     soa_mname_id = DynamicModelMultipleChoiceField(
         queryset=NameServer.objects.all(),
         required=False,
+        null_option=_("None"),
         label=_("MName"),
     )
     soa_rname = forms.CharField(
@@ -137,34 +143,46 @@ class ZoneTemplateFilterForm(TenancyFilterForm, NetBoxModelFilterSetForm):
     record_template_id = DynamicModelMultipleChoiceField(
         queryset=RecordTemplate.objects.all(),
         required=False,
+        null_option=_("None"),
         label=_("Record Templates"),
     )
     description = forms.CharField(
         required=False,
     )
+    dnssec_policy_id = DynamicModelMultipleChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        null_option=_("None"),
+        label=_("DNSSEC Policy ID"),
+    )
     registrar_id = DynamicModelMultipleChoiceField(
         queryset=Registrar.objects.all(),
         required=False,
+        null_option=_("None"),
         label=_("Registrar"),
     )
     registrant_id = DynamicModelMultipleChoiceField(
         queryset=RegistrationContact.objects.all(),
         required=False,
+        null_option=_("None"),
         label=_("Registrant"),
     )
     admin_c_id = DynamicModelMultipleChoiceField(
         queryset=RegistrationContact.objects.all(),
         required=False,
+        null_option=_("None"),
         label=_("Administrative Contact"),
     )
     tech_c_id = DynamicModelMultipleChoiceField(
         queryset=RegistrationContact.objects.all(),
         required=False,
+        null_option=_("None"),
         label=_("Technical Contact"),
     )
     billing_c_id = DynamicModelMultipleChoiceField(
         queryset=RegistrationContact.objects.all(),
         required=False,
+        null_option=_("None"),
         label=_("Billing Contact"),
     )
     tag = TagFilterField(ZoneTemplate)
@@ -189,6 +207,15 @@ class ZoneTemplateImportForm(NetBoxModelImportForm):
         required=False,
         label=_("Record Templates"),
     )
+    dnssec_policy = CSVModelChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        to_field_name="name",
+        error_messages={
+            "invalid_choice": _("DNSSEC policy %(value)s not found"),
+        },
+        label=_("DNSSEC Policy"),
+    )
     registrar = CSVModelChoiceField(
         queryset=Registrar.objects.all(),
         required=False,
@@ -250,6 +277,7 @@ class ZoneTemplateImportForm(NetBoxModelImportForm):
             "soa_mname",
             "soa_rname",
             "record_templates",
+            "dnssec_policy",
             "description",
             "registrar",
             "registrant",
@@ -281,6 +309,11 @@ class ZoneTemplateBulkEditForm(NetBoxModelBulkEditForm):
     description = forms.CharField(
         max_length=200, required=False, label=_("Description")
     )
+    dnssec_policy = DynamicModelChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        label=_("DNSSEC Policy"),
+    )
     registrar = DynamicModelChoiceField(
         queryset=Registrar.objects.all(),
         required=False,
@@ -334,6 +367,10 @@ class ZoneTemplateBulkEditForm(NetBoxModelBulkEditForm):
             "record_templates",
             name=_("Record Templates"),
         ),
+        FieldSet(
+            "dnssec_policy",
+            name=_("DNSSEC"),
+        ),
         FieldSet(
             "registrar",
             "registrant",
@@ -351,6 +388,7 @@ class ZoneTemplateBulkEditForm(NetBoxModelBulkEditForm):
         "soa_mname",
         "soa_rname",
         "record_templates",
+        "dnssec_policy",
         "registrar",
         "registrant",
         "admin_c",

netbox_dns/graphql/__init__.py

@@ -1,10 +1,12 @@
 from .schema import (
-    NetBoxDNSViewQuery,
     NetBoxDNSNameServerQuery,
-    NetBoxDNSRegistrationContactQuery,
-    NetBoxDNSRegistrarQuery,
+    NetBoxDNSViewQuery,
     NetBoxDNSZoneQuery,
     NetBoxDNSRecordQuery,
+    NetBoxDNSDNSSECKeyTemplateQuery,
+    NetBoxDNSDNSSECPolicyQuery,
+    NetBoxDNSRegistrationContactQuery,
+    NetBoxDNSRegistrarQuery,
     NetBoxDNSZoneTemplateQuery,
     NetBoxDNSRecordTemplateQuery,
 )
@@ -14,6 +16,8 @@ schema = [
     NetBoxDNSViewQuery,
     NetBoxDNSZoneQuery,
     NetBoxDNSRecordQuery,
+    NetBoxDNSDNSSECKeyTemplateQuery,
+    NetBoxDNSDNSSECPolicyQuery,
     NetBoxDNSRegistrationContactQuery,
     NetBoxDNSRegistrarQuery,
     NetBoxDNSZoneTemplateQuery,

netbox_dns/graphql/filters.py

@@ -7,6 +7,8 @@ from netbox_dns.models import (
     View,
     Zone,
     Record,
+    DNSSECKeyTemplate,
+    DNSSECPolicy,
     RegistrationContact,
     Registrar,
     ZoneTemplate,
@@ -17,6 +19,8 @@ from netbox_dns.filtersets import (
     ViewFilterSet,
     ZoneFilterSet,
     RecordFilterSet,
+    DNSSECKeyTemplateFilterSet,
+    DNSSECPolicyFilterSet,
     RegistrationContactFilterSet,
     RegistrarFilterSet,
     ZoneTemplateFilterSet,
@@ -48,6 +52,18 @@ class NetBoxDNSRecordFilter(BaseFilterMixin):
     ip_address: str | None
 
 
+@strawberry_django.filter(DNSSECKeyTemplate, lookups=True)
+@autotype_decorator(DNSSECKeyTemplateFilterSet)
+class NetBoxDNSDNSSECKeyTemplateFilter(BaseFilterMixin):
+    ip_address: str | None
+
+
+@strawberry_django.filter(DNSSECPolicy, lookups=True)
+@autotype_decorator(DNSSECPolicyFilterSet)
+class NetBoxDNSDNSSECPolicyFilter(BaseFilterMixin):
+    ip_address: str | None
+
+
 @strawberry_django.filter(ZoneTemplate, lookups=True)
 @autotype_decorator(ZoneTemplateFilterSet)
 class NetBoxDNSZoneTemplateFilter(BaseFilterMixin):

netbox_dns/graphql/schema.py

@@ -8,6 +8,8 @@ from .types import (
     NetBoxDNSViewType,
     NetBoxDNSZoneType,
     NetBoxDNSRecordType,
+    NetBoxDNSDNSSECKeyTemplateType,
+    NetBoxDNSDNSSECPolicyType,
     NetBoxDNSRegistrationContactType,
     NetBoxDNSRegistrarType,
     NetBoxDNSZoneTemplateType,
@@ -41,6 +43,24 @@ class NetBoxDNSRecordQuery:
     netbox_dns_record_list: List[NetBoxDNSRecordType] = strawberry_django.field()
 
 
+@strawberry.type(name="Query")
+class NetBoxDNSDNSSECKeyTemplateQuery:
+    netbox_dns_dnssec_key_template: NetBoxDNSDNSSECKeyTemplateType = (
+        strawberry_django.field()
+    )
+    netbox_dns_dnssec_key_template_list: List[NetBoxDNSDNSSECKeyTemplateType] = (
+        strawberry_django.field()
+    )
+
+
+@strawberry.type(name="Query")
+class NetBoxDNSDNSSECPolicyQuery:
+    netbox_dns_dnssec_policy: NetBoxDNSDNSSECPolicyType = strawberry_django.field()
+    netbox_dns_dnssec_policy_list: List[NetBoxDNSDNSSECPolicyType] = (
+        strawberry_django.field()
+    )
+
+
 @strawberry.type(name="Query")
 class NetBoxDNSRegistrationContactQuery:
     netbox_dns_registration_contact: NetBoxDNSRegistrationContactType = (

netbox_dns/graphql/types.py

@@ -13,6 +13,8 @@ from netbox_dns.models import (
     View,
     Zone,
     Record,
+    DNSSECKeyTemplate,
+    DNSSECPolicy,
     RegistrationContact,
     Registrar,
     ZoneTemplate,
@@ -23,6 +25,8 @@ from .filters import (
     NetBoxDNSViewFilter,
     NetBoxDNSZoneFilter,
     NetBoxDNSRecordFilter,
+    NetBoxDNSDNSSECKeyTemplateFilter,
+    NetBoxDNSDNSSECPolicyFilter,
     NetBoxDNSRegistrationContactFilter,
     NetBoxDNSRegistrarFilter,
     NetBoxDNSZoneTemplateFilter,
@@ -58,6 +62,7 @@ class NetBoxDNSViewType(NetBoxObjectType):
 @strawberry_django.type(Zone, fields="__all__", filters=NetBoxDNSZoneFilter)
 class NetBoxDNSZoneType(NetBoxObjectType):
     name: str
+    description: str | None
     status: str
     active: bool
     view: Annotated["NetBoxDNSViewType", strawberry.lazy("netbox_dns.graphql.types")]
@@ -78,9 +83,13 @@ class NetBoxDNSZoneType(NetBoxObjectType):
     soa_expire: BigInt
     soa_minimum: BigInt
     soa_serial_auto: bool
-    description: str | None
-    arpa_network: str | None
-    tenant: Annotated["TenantType", strawberry.lazy("tenancy.graphql.types")] | None
+    dnssec_policy: (
+        Annotated[
+            "NetBoxDNSDNSSECPolicyType", strawberry.lazy("netbox_dns.graphql.types")
+        ]
+        | None
+    )
+    inline_signing: bool
     registrar: (
         Annotated["NetBoxDNSRegistrarType", strawberry.lazy("netbox_dns.graphql.types")]
         | None
@@ -126,6 +135,8 @@ class NetBoxDNSZoneType(NetBoxObjectType):
     rfc2317_child_zones: List[
         Annotated["NetBoxDNSRecordType", strawberry.lazy("netbox_dns.graphql.types")]
     ]
+    arpa_network: str | None
+    tenant: Annotated["TenantType", strawberry.lazy("tenancy.graphql.types")] | None
 
 
 @strawberry_django.type(Record, fields="__all__", filters=NetBoxDNSRecordFilter)
@@ -162,6 +173,53 @@ class NetBoxDNSRecordType(NetBoxObjectType):
     ]
 
 
+@strawberry_django.type(
+    DNSSECKeyTemplate, fields="__all__", filters=NetBoxDNSDNSSECKeyTemplateFilter
+)
+class NetBoxDNSDNSSECKeyTemplateType(NetBoxObjectType):
+    name: str
+    description: str
+    tenant: Annotated["TenantType", strawberry.lazy("tenancy.graphql.types")] | None
+    type: str
+    lifetime: BigInt | None
+    algorithm: str
+    key_size: BigInt | None
+
+
+@strawberry_django.type(
+    DNSSECPolicy, fields="__all__", filters=NetBoxDNSDNSSECPolicyFilter
+)
+class NetBoxDNSDNSSECPolicyType(NetBoxObjectType):
+    name: str
+    description: str | None
+    status: str
+    tenant: Annotated["TenantType", strawberry.lazy("tenancy.graphql.types")] | None
+    key_templates: List[
+        Annotated[
+            "NetBoxDNSDNSSECKeyTemplateType",
+            strawberry.lazy("netbox_dns.graphql.types"),
+        ]
+    ]
+    dnskey_ttl: BigInt | None
+    purge_keys: BigInt | None
+    publish_safety: BigInt | None
+    retire_safety: BigInt | None
+    signatures_jitter: BigInt | None
+    signatures_refresh: BigInt | None
+    signatures_validity: BigInt | None
+    signatures_validity_dnskey: BigInt | None
+    max_zone_ttl: BigInt | None
+    zone_propagation_delay: BigInt | None
+    create_cdnskey: bool
+    cds_digest_types: List[str]
+    parent_ds_ttl: BigInt | None
+    parent_propagation_delay: BigInt | None
+    use_nsec3: bool
+    nsec3_iterations: BigInt | None
+    nsec3_opt_out: bool
+    nsec3_salt_size: BigInt | None
+
+
 @strawberry_django.type(
     RegistrationContact, fields="__all__", filters=NetBoxDNSRegistrationContactFilter
 )
@@ -226,6 +284,12 @@ class NetBoxDNSZoneTemplateType(NetBoxObjectType):
         | None
     )
     soa_rname: str | None
+    dnssec_policy: (
+        Annotated[
+            "NetBoxDNSDNSSECPolicyType", strawberry.lazy("netbox_dns.graphql.types")
+        ]
+        | None
+    )
     record_templates: List[
         Annotated[
             "NetBoxDNSRecordTemplateType", strawberry.lazy("netbox_dns.graphql.types")