Now finding a way to save the keys in the config xml or write them to a different location to make them persistent upon reboot

Also looking for a way to save my slave zone. After reboot my slave zone is empty, if there is no master. https://forum.netgate.com/topic/188369/slave-zone-in-bind-9-17/3

2.7.2-RELEASE][root@gateway.mydomain.com]/var/etc/named/etc/namedb/keys: dnssec-dsfromkey -2 Kmydomain.com.+019+31296.key
mydomain.com. IN DS 31296 13 2 XXXXC43FFEE8FEA5868B1E81ECXXXX31A1D9183B800A688A6DA664FB62F8XXXX

I have set it up in a different way, but the keys do not persist upon reboot pfSense, maybe the above link can help with that.

I added to services -> bind dns server -> settings -> advanced features -> global settings:

dnssec-policy "mydomain-com-no-rotate" {
    keys {
        ksk key-directory lifetime unlimited algorithm 13;
        zsk key-directory lifetime unlimited algorithm 13;
    };
    nsec3param;
};

Then under zones -> mydomain.com (edit) -> custom_option:

key-directory "/etc/namedb/keys";
dnssec-policy "mydomain-com-no-rotate";
inline-signing yes;

Then under the DNSSEC option:

Inline Signing: Disable
Backup Keys: Disable

Now finding a way to save the keys in the config xml or write them to a different location to make them persistent upon reboot.

The bind package is writing the keys to:

/var/etc/named/etc/namedb/keys

So, maybe the bind9 package in running in a chroot, which I can't change or disable.