// NS1

options {
	query-source address 10.53.0.1;
	notify-source 10.53.0.1;
	transfer-source 10.53.0.1;
	port @PORT@;
	pid-file "named.pid";
	listen-on { 10.53.0.1; };
	listen-on-v6 { none; };
	recursion no;
	notify yes;
	dnssec-validation no;
};


key rndc_key {
	secret "1234abcd8765";
	algorithm @DEFAULT_HMAC@;
};

controls {
	inet 10.53.0.1 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
};

dnssec-policy "zonechecks" {
	inline-signing no;
	keys {
		ksk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
		zsk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
	};
};

view unused {
	match-clients { none; };

	zone "duplicate.example" {
		type primary;
		file "duplicate.db";
	};
};

view primary {
	match-clients { any; };

	zone "primary.example" {
		type primary;
		file "primary.db";
		allow-update { any; };
		allow-transfer { any; };
		dnssec-policy zonechecks;
	};

	zone "bigserial.example" {
		type primary;
		file "bigserial.db";
	};

	zone "reload.example" {
		type primary;
		file "reload.db";
	};

	zone "duplicate.example" {
		type primary;
		file "duplicate.db";
	};
};
