---
# BIND9 Configuration for ns1.as393837.net
# This server will be the primary authoritative nameserver

bind_allow_query: ["any"]
bind_listen_ipv4: ["any"]
bind_recursion: false
bind_zone_dir: /var/cache/bind
bind_zone_master_server_ip: "{{ public_ip }}"

# DNSSEC settings (dnssec-enable removed in BIND 9.16+)
bind_dnssec_validation: auto

# Secondaries that should receive NOTIFY
bind_also_notify:
  - 204.87.183.53  # ns2
  - 172.245.56.83  # vm1.w5isp.com

bind_allow_transfer:
  - 23.128.97.53   # ns-global.kjsl.com
  - 204.87.183.53  # ns2
  - 172.245.56.83  # vm1.w5isp.com

# Zone definitions are loaded from individual files in zones/ directory
bind_zones:
  - "{{ w5isp_com_zone }}"
  - "{{ aprs_me_zone }}"
  - "{{ mcintire_me_zone }}"
  - "{{ manero_org_zone }}"
  - "{{ ntxarms_com_zone }}"
  - "{{ towerops_net_zone }}"
  - "{{ vntx_net_zone }}"
  - "{{ vntx_org_zone }}"
  - "{{ reverse_188_zone }}"
  - "{{ reverse_189_zone }}"
  - "{{ reverse_190_zone }}"
  - "{{ reverse_191_zone }}"