---
kind: compose
metadata:
  name: BIND9
  description: |-
    BIND9 is the most widely used DNS server on the Internet.
    This template provides an authoritative and recursive DNS server with example zones,
    TSIG authentication for secure zone transfers, and DNSSEC support.
    ## References
    * **Project:** https://www.isc.org/bind/
    * **Documentation:** https://bind9.readthedocs.io/
  version: 9.20-24.10_edge
  author: Christian Lempa
  date: "2025-10-02"
  tags:
    - network
    - volume
  icon:
    provider: selfh
    id: bind-9
  draft: true
spec:
  dns_security:
    title: dns_security
    vars:
      dnssec_enabled:
        description: Enable DNSSEC
        type: bool
  dns_zone:
    title: dns_zone
    vars:
      domain_name:
        description: Primary domain name
        type: str
        default: home.arpa
      tsig_enabled:
        description: Enable TSIG
        type: bool
      tsig_key_secret:
        description: TSIG key secret
        type: secret
        config:
          autogenerated: true
        needs: [tsig_enabled=true]
  general:
    vars:
      service_name:
        default: bind9