options { directory "<%= $dns::zone_directory %>"; forwarers { 8.8.8.8; 8.8.4.4; }; recursion yes; allow-query { any; }; dnssec-validation yes; empty-zone-enable yes; listen-on-v6 { any; }; allow-recursion { localnets; localhost; }; };