{% if trust_anchors is defined %}
include "trusted.conf";
{% set dnssec_validation = "yes" %}
{% else %}
{% set dnssec_validation = "auto" %}
{% endif %}


options {
        query-source address 10.53.0.3;
        notify-source 10.53.0.3;
        transfer-source 10.53.0.3;
        port @PORT@;
        pid-file "named.pid";
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        allow-transfer { any; };
        recursion yes;
        dnssec-validation @dnssec_validation@;
        notify-cfg CDS { notify yes; };
};

key rndc_key {
        secret "1234abcd8765";
        algorithm @DEFAULT_HMAC@;
};

controls {
        inet 10.53.0.3 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
};

zone "." {
        type hint;
        file "../../_common/root.hint";
};
