/*******************************************************************************
 *
 * named configuration.
 *
 * FreeBSD: /usr/local/etc/namedb/named.conf
 * Debian : /etc/bind/named.conf
 * CentOS : /etc/named.conf
 *
 * More info: https://www.librobert.net/boek/internet
 *
 *******************************************************************************
 *
 * Copyright (c) 2019 Robert LA LAU < https://www.librobert.net/ >
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions are met:
 *
 * 1. Redistributions of source code must retain the above copyright notice,
 *    this list of conditions and the following disclaimer.
 *
 * 2. Redistributions in binary form must reproduce the above copyright notice,
 *    this list of conditions and the following disclaimer in the documentation
 *    and/or other materials provided with the distribution.
 *
 * 3. Neither the name of the copyright holder nor the names of its contributors
 *    may be used to endorse or promote products derived from this software
 *    without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
 * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 *
 ******************************************************************************/

// IP address lists.
acl "secondaries" {
	// Example! Change this!
	203.0.113.145;
};
acl "loopback" {
	127.0.0.0/8;
	::1/128;
};

options {
	/*
	 * FreeBSD : /usr/local/etc/namedb/working
	 * Debian  : /var/cache/bind
	 * CentOS  : /var/named
	 */
	directory "/usr/local/etc/namedb/working";

	/*
	 * FreeBSD : /var/run/named.pid
	 * Debian  : /run/named/named.pid
	 * CentOS  : /run/named/named.pid
	 */
	pid-file "/var/run/named.pid";

	listen-on {
		127.0.0.1;

		// Example! Change this!
		198.51.100.156;
	};

	// Default permissions.
	allow-query { loopback; };
	allow-query-cache { loopback; };
	allow-recursion { loopback; };
	allow-transfer { none; };
	allow-update { none; };

	// Cloudflare/APNIC DNS cache.
	forwarders {
		1.1.1.1;
		1.0.0.1;
	};
};

logging {
	channel default_log {
		file "/var/log/named/named.log" versions 5 size 50M;
		print-time yes;
		print-severity yes;
		print-category yes;
	};

	category default { default_log; };
	category general { default_log; };
};

// Dynamic updates and reloads.
/*
 * FreeBSD : /usr/local/etc/namedb/rndc.key
 * Debian  : /etc/bind/rndc.key
 * CentOS  : /etc/rndc.key
 */
include "/usr/local/etc/namedb/rndc.key";
controls {
	inet 127.0.0.1 port 953 allow { 127.0.0.1; } keys { rndc-key; };
};

// Root hints.
zone "." IN {
	type hint;

	/*
	 * FreeBSD : /usr/local/etc/namedb/named.root
	 * Debian  : /usr/share/dns/root.hints
	 * CentOS  : /var/named/named.ca
	 */
	file "/usr/local/etc/namedb/named.root";
};

// localhost.
zone "localhost" IN {
	type master;
	notify no;

	/*
	 * FreeBSD : /usr/local/etc/namedb/master/localhost-forward.db
	 * Debian  : /etc/bind/db.local
	 * CentOS  : /var/named/named.localhost
	 */
	file "/usr/local/etc/namedb/master/localhost-forward.db";
};