xref: /netbsd-src/external/mpl/bind/dist/bin/tests/system/autosign/ns2/named.conf.in (revision 325dc460fcb903ba21d515d6422d8abf39bc692e)
1/*
2 * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
3 *
4 * SPDX-License-Identifier: MPL-2.0
5 *
6 * This Source Code Form is subject to the terms of the Mozilla Public
7 * License, v. 2.0.  If a copy of the MPL was not distributed with this
8 * file, you can obtain one at https://mozilla.org/MPL/2.0/.
9 *
10 * See the COPYRIGHT file distributed with this work for additional
11 * information regarding copyright ownership.
12 */
13
14// NS2
15
16options {
17	query-source address 10.53.0.2;
18	notify-source 10.53.0.2;
19	transfer-source 10.53.0.2;
20	port @PORT@;
21	pid-file "named.pid";
22	listen-on { 10.53.0.2; };
23	listen-on-v6 { none; };
24	recursion no;
25	notify yes;
26	dnssec-validation yes;
27	dnssec-loadkeys-interval 30;
28};
29
30key rndc_key {
31	secret "1234abcd8765";
32	algorithm hmac-sha256;
33};
34
35controls {
36	inet 10.53.0.2 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
37};
38
39zone "." {
40	type hint;
41	file "../../common/root.hint";
42};
43
44zone "example" {
45	type primary;
46	file "example.db";
47	allow-query { any; };
48	allow-transfer { any; };
49	allow-update { any; };
50	auto-dnssec maintain;
51};
52
53zone "bar" {
54	type primary;
55	file "bar.db";
56	allow-query { any; };
57	allow-transfer { any; };
58	allow-update { any; };
59	auto-dnssec maintain;
60	dnssec-dnskey-kskonly yes;
61};
62
63zone "private.secure.example" {
64	type primary;
65	file "private.secure.example.db";
66	allow-query { any; };
67	allow-transfer { any; };
68	allow-update { any; };
69	auto-dnssec maintain;
70};
71
72zone "insecure.secure.example" {
73	type primary;
74	file "insecure.secure.example.db";
75	allow-query { any; };
76	allow-transfer { any; };
77	allow-update { any; };
78	auto-dnssec maintain;
79};
80
81zone "child.nsec3.example" {
82	type primary;
83	file "child.nsec3.example.db";
84	allow-query { any; };
85	allow-transfer { any; };
86	allow-update { any; };
87	auto-dnssec maintain;
88};
89
90zone "child.optout.example" {
91	type primary;
92	file "child.optout.example.db";
93	allow-query { any; };
94	allow-transfer { any; };
95	allow-update { any; };
96	auto-dnssec maintain;
97};
98
99include "trusted.conf";
100