// NS1

acl allowed {
	! 10.53.0.5;
	any;
};

options {
	query-source address 10.53.0.1;
	notify-source 10.53.0.1;
	transfer-source 10.53.0.1;
	port @PORT@;
	pid-file "named.pid";
	listen-on { 10.53.0.1; };
	listen-on-v6 { none; };
	recursion no;
	notify no;
	dnssec-validation no;
	allow-query { allowed; };
};


key rndc_key {
	secret "1234abcd8765";
	algorithm @DEFAULT_HMAC@;
};

controls {
	inet 10.53.0.1 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
};

zone "." {
	type primary;
	file "root.db.signed";
};

zone "tld" {
	type primary;
	file "tld.db.signed";
};

zone "sub.tld" {
	type primary;
	file "sub.tld.db.signed";
};
