dnssec-policy "ed25519" {
        dnskey-ttl 1234;

        keys {
                ksk key-directory lifetime P10Y algorithm 15;
                zsk key-directory lifetime P5Y  algorithm 15;
                zsk key-directory lifetime P1Y  algorithm 15 256;
        };
};

zone "ed25519.kasp" {
        type primary;
        file "ed25519.kasp.db";
        dnssec-policy "ed25519";
};