// vim: ft=named

options {
	directory "/var/named";
	key-directory "keys";
	pid-file "/run/named/named.pid";
	auth-nxdomain yes;
	datasize default;
	listen-on-v6 { any; };
	tcp-clients 100;
	allow-query-cache { none; };
	allow-query { any; };
	allow-transfer { none; };
	allow-update { none; };
	recursion no;
	version none;
	hostname none;
	server-id none;
	notify no;
	also-notify {
		178.79.157.58; // lucifer
	};

};

dnssec-policy standard {
	keys {
		ksk lifetime 365d algorithm ed25519;
		zsk lifetime 60d algorithm ed25519;
	};
};

zone "kyriasis.com" IN {
	type master;
	file "dns/kyriasis.com.zone";
	allow-transfer {
		178.79.157.58; // lucifer
		2a01:7e00::f03c:91ff:fe69:1787; // lucifer
		109.74.205.187; // the-tk.com
		2a01:7e00::f03c:91ff:fe50:9476; // the-tk.com
	};
	notify explicit;

	dnssec-policy standard;
};

zone "remmy.io" IN {
	type master;
	file "dns/remmy.io.zone";
	allow-transfer {
		178.79.157.58; // lucifer
		2a01:7e00::f03c:91ff:fe69:1787; // lucifer
	};
	notify explicit;

	dnssec-policy standard;
};

logging {
	channel xfer-log {
		file "/var/log/named.log";
		print-category yes;
		print-severity yes;
		print-time yes;
		severity info;
	};
	category xfer-in { xfer-log; };
	category xfer-out { xfer-log; };
	category notify { xfer-log; };
};