ffmyk-ansible/roles/install_bind/templates/named.conf.j2

// vim:set ts=4 sw=4 et:

options {
    directory "/var/named";
    pid-file "/run/named/named.pid";

    dnssec-enable yes;
    dnssec-validation yes;
    dnssec-lookaside auto;

    auth-nxdomain no;    # conform to RFC1035

    listen-on-v6 {
{% for site in sites %}
        {{ site.bat_ipv6 }};
{% endfor %}
    };
    listen-on port 53 {
        127.0.0.1;
{% for site in sites %}
        {{ site.bat_ipv4 }};
{% endfor %}
    };

    allow-recursion { 127.0.0.1; 10.222.0.0/16; 2001:470:cd45:ff00::/56; };
    allow-transfer { none; };
    allow-update { none; };

    version none;
    hostname none;
    server-id none;
};

zone "localhost" IN {
    type master;
    file "localhost.zone";
};

zone "0.0.127.in-addr.arpa" IN {
    type master;
    file "127.0.0.zone";
};

zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" {
    type master;
    file "localhost.ip6.zone";
};

zone "255.in-addr.arpa" IN {
    type master;
    file "empty.zone";
};

zone "0.in-addr.arpa" IN {
    type master;
    file "empty.zone";
};

zone "." IN {
    type hint;
    file "root.hint";
};

//zone "ffmyk" IN {
//    type slave;
//    file "bak/ffmyk.zone";
//    allow-query { any; };
//    masters { 10.222.100.1; };
//};