// vim: ft=named

options {
	directory "/var/named";
	key-directory "keys";
	pid-file "/run/named/named.pid";

	listen-on-v6 { any; };

	tcp-clients 100;

	allow-query-cache { none; };
	allow-query { any; };
	allow-transfer { none; };
	allow-update { none; };

	recursion no;

	version none;
	hostname none;
	server-id none;
};

dnssec-policy standard {
	keys {
		ksk lifetime 365d algorithm ed25519;
		zsk lifetime 60d algorithm ed25519;
	};
};

zone "kyriasis.com" IN {
	type master;
	file "dns/kyriasis.com.zone";

	dnssec-policy standard;
};

zone "remmy.io" IN {
	type master;
	file "dns/remmy.io.zone";

	dnssec-policy standard;
};

logging {
	channel xfer-log {
		file "/var/log/named.log";
		print-category yes;
		print-severity yes;
		print-time yes;
		severity info;
	};
	category xfer-in { xfer-log; };
	category xfer-out { xfer-log; };
	category notify { xfer-log; };
};