ChristianLempa_Boilerplates/library/compose/bind9/config/named.conf.zones.j2

// Custom DNS Zones Configuration
// Add your authoritative zones here

// Example zone for {{ domain_name | default('example.com') }}
zone "{{ domain_name | default('example.com') }}" {
    type master;
    file "/var/lib/bind/db.{{ domain_name | default('example.com') }}";
    
    // Allow zone transfers using TSIG key
    allow-transfer { key "{{ tsig_key_name | default('transfer-key') }}"; };
    
    // Enable zone updates with TSIG (for dynamic DNS)
    // allow-update { key "{{ tsig_key_name | default('transfer-key') }}"; };
    
    // Enable DNSSEC inline signing (optional)
    // dnssec-policy default;
    // inline-signing yes;
};

// Example reverse zone for 192.168.1.0/24
// zone "1.168.192.in-addr.arpa" {
//     type master;
//     file "/var/lib/bind/db.192.168.1";
//     allow-transfer { key "{{ tsig_key_name | default('transfer-key') }}"; };
// };

// Secondary/Slave zone example
// zone "secondary.example.com" {
//     type slave;
//     masters { 192.168.1.100 key {{ tsig_key_name | default('transfer-key') }}; };
//     file "/var/lib/bind/db.secondary.example.com";
// };