dnssec-policy "moeny-policy" {
    keys {
        ksk lifetime unlimited algorithm ecdsap256sha256;
        zsk lifetime unlimited algorithm ecdsap256sha256;
    };
    max-zone-ttl 1d;
    parent-ds-ttl 1d;
    parent-propagation-delay 1h;
    signatures-refresh 1d;
    signatures-validity 30d;
    signatures-validity-dnskey 30d;
};