options {
    listen-on port 5355 { any; };
    listen-on-v6 port 5355 { any; };
    directory "/var/cache/bind";
    recursion no;
    allow-recursion { none; };
    allow-query { any; };
};

logging {
    channel stderr_log {
        stderr;
        severity dynamic;
        print-time yes;
        print-category yes;
        print-severity yes;
    };

    category default { stderr_log; };
    category general { stderr_log; };
    category queries { stderr_log; };
    category resolver { stderr_log; };
    category client { stderr_log; };
    category security { stderr_log; };
    category config { stderr_log; };
    category dnssec { stderr_log; };
    category lame-servers { stderr_log; };
    category network { stderr_log; };
    category notify { stderr_log; };
    category xfer-in { stderr_log; };
    category xfer-out { stderr_log; };
    category update { stderr_log; };
    category update-security { stderr_log; };
    category dispatch { stderr_log; };
    category rpz { stderr_log; };
    category rate-limit { stderr_log; };
};

controls {
    inet 127.0.0.1 port 9953
        allow { 127.0.0.1; } keys { "rndc-key"; };

    inet ::1 port 9953
        allow { ::1; } keys { "rndc-key"; };
};

########## ACLs ##########

acl public {
    !10.0.0.0/8;
    !172.16.0.0/12;
    !192.168.0.0/16;
    any;
};

acl private {
    10.0.0.0/8;
    172.16.0.0/12;
    192.168.0.0/16;
};

######## TSIG Keys ########
key "rndc-key" {
    algorithm hmac-sha256;
    secret "yJrOo4c3rDnv3mIrNDfSpGXePsypavsUSpNGxSojcYM=";
};

key "_default_" {
    algorithm hmac-sha256;
    secret "yJrOo4c3rDnv3mIrNDfSpGXePsypavsUSpNGxSojcYM=";
};

###########################


########## ZONES ##########
view "_default_" {
    match-clients { key "_default_"; public; };
    allow-notify  { key "_default_"; };
    allow-transfer  { key "_default_"; };

    catalog-zones {
        zone "catz"
            default-masters { ::1 port 5354 key "_default_"; }
            zone-directory "/var/lib/bind"
            min-update-interval 1;
    };

    zone "catz" {
        type slave;
        file "/var/lib/bind/catz_default";
        masters { ::1 port 5354 key "_default_"; };
        notify no;
    };
};