#
# File managed by Puppet. Local changes WILL be overwritter',
#

options {
  directory "<%= $dns::directory %>";
  forwarders { 8.8.8.8; 8.8.4.4; };
  recursion yes;
  allow-query { any; };
  dnssec-validation yes;

  listen-on-v6 { any; };

  allow-recursion { localnets; localhost; };
};

<%# Equivalent to what rndc-confgen emits %>
include "<%= $dns::rndc_key_file %>";

controls {
  inet 127.0.0.1 port 953 allow { 127.0.0.1; } keys { "rndc-key"; };
};

<%# Include remaining stuff %>
include "<%= $dns::zoneconf_dir %>/*.conf";
include "<%= $dns::keyconf_dir %>/*.key";