// vim: ft=named

options {
	directory "/var/named";
	pid-file "/run/named/named.pid";
	auth-nxdomain yes;
	datasize default;
	listen-on-v6 { any; };
	allow-query-cache { none; };
	allow-query { any; };
	allow-transfer { none; };
	allow-update { none; };
	recursion no;
	version none;
	hostname none;
	server-id none;
	notify no;
	also-notify {178.79.157.58;};
};

zone "localhost" IN {
	type master;
	file "localhost.zone";
	allow-transfer { any; };
};

zone "0.0.127.in-addr.arpa" IN {
	type master;
	file "127.0.0.zone";
	allow-transfer { any; };
};

zone "." IN {
	type hint;
	file "root.hint";
};

zone "kyriasis.com" IN {
	type master;
	file "/home/kyrias/dns/kyriasis.com.zone";
	allow-transfer {
		178.79.157.58;	// lucifer
		2a01:7e00::f03c:91ff:fe69:1787; // lucifer
	};
	notify explicit;

	key-directory "/home/kyrias/dns/keys";

	# publish and activate dnssec keys
	auto-dnssec maintain;

	inline-signing yes;
};

logging {
	channel xfer-log {
		file "/var/log/named.log";
		print-category yes;
		print-severity yes;
		print-time yes;
		severity info;
	};
	category xfer-in { xfer-log; };
	category xfer-out { xfer-log; };
	category notify { xfer-log; };
};