Sven Luethi
136ee48052
new file: Containerfile new file: README.md new file: compose.yml new file: configuration.py new file: entrypoint.sh new file: local_requirements.txt new file: named.conf new file: nginx.conf new file: rndc.key
97 lines
2.2 KiB
Plaintext
97 lines
2.2 KiB
Plaintext
options {
|
|
listen-on port 5355 { any; };
|
|
listen-on-v6 port 5355 { any; };
|
|
directory "/var/cache/bind";
|
|
recursion no;
|
|
allow-recursion { none; };
|
|
allow-query { any; };
|
|
};
|
|
|
|
logging {
|
|
channel stderr_log {
|
|
stderr;
|
|
severity dynamic;
|
|
print-time yes;
|
|
print-category yes;
|
|
print-severity yes;
|
|
};
|
|
|
|
category default { stderr_log; };
|
|
category general { stderr_log; };
|
|
category queries { stderr_log; };
|
|
category resolver { stderr_log; };
|
|
category client { stderr_log; };
|
|
category security { stderr_log; };
|
|
category config { stderr_log; };
|
|
category dnssec { stderr_log; };
|
|
category lame-servers { stderr_log; };
|
|
category network { stderr_log; };
|
|
category notify { stderr_log; };
|
|
category xfer-in { stderr_log; };
|
|
category xfer-out { stderr_log; };
|
|
category update { stderr_log; };
|
|
category update-security { stderr_log; };
|
|
category dispatch { stderr_log; };
|
|
category rpz { stderr_log; };
|
|
category rate-limit { stderr_log; };
|
|
};
|
|
|
|
controls {
|
|
inet 127.0.0.1 port 9953
|
|
allow { 127.0.0.1; } keys { "rndc-key"; };
|
|
|
|
inet ::1 port 9953
|
|
allow { ::1; } keys { "rndc-key"; };
|
|
};
|
|
|
|
########## ACLs ##########
|
|
|
|
acl public {
|
|
!10.0.0.0/8;
|
|
!172.16.0.0/12;
|
|
!192.168.0.0/16;
|
|
any;
|
|
};
|
|
|
|
acl private {
|
|
10.0.0.0/8;
|
|
172.16.0.0/12;
|
|
192.168.0.0/16;
|
|
};
|
|
|
|
######## TSIG Keys ########
|
|
key "rndc-key" {
|
|
algorithm hmac-sha256;
|
|
secret "yJrOo4c3rDnv3mIrNDfSpGXePsypavsUSpNGxSojcYM=";
|
|
};
|
|
|
|
key "_default_" {
|
|
algorithm hmac-sha256;
|
|
secret "yJrOo4c3rDnv3mIrNDfSpGXePsypavsUSpNGxSojcYM=";
|
|
};
|
|
|
|
###########################
|
|
|
|
|
|
########## ZONES ##########
|
|
view "_default_" {
|
|
match-clients { key "_default_"; public; };
|
|
allow-notify { key "_default_"; };
|
|
allow-transfer { key "_default_"; };
|
|
|
|
catalog-zones {
|
|
zone "catz"
|
|
default-masters { ::1 port 5354 key "_default_"; }
|
|
zone-directory "/var/lib/bind"
|
|
min-update-interval 1;
|
|
};
|
|
|
|
zone "catz" {
|
|
type slave;
|
|
file "/var/lib/bind/catz_default";
|
|
masters { ::1 port 5354 key "_default_"; };
|
|
notify no;
|
|
};
|
|
};
|
|
|