// NS5

include "../../_common/rndc.key";

controls {
	inet 10.53.0.5 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
};

options {
	query-source address 10.53.0.5;
	notify-source 10.53.0.5;
	transfer-source 10.53.0.5;
	port @PORT@;
	pid-file "named.pid";
	listen-on { 10.53.0.5; };
	listen-on-v6 { none; };
	dnssec-validation no;
	recursion no;
	notify yes;
	notify-delay 0;
	servfail-ttl 0;
};

dnssec-policy "inline" {
	keys {
		ksk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
		zsk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
	};
};

zone "bits" {
	type secondary;
	primaries { 10.53.0.2; };
	file "bits.bk";
	dnssec-policy inline;
	inline-signing yes;
};
