ansible-role-bind/templates/named.conf.local.j2

# {{ ansible_managed }}
{% for zone, value in bind_zones.iteritems() %}

zone "{{ zone }}" IN {
  type master;
{% if 'dnssec' in value and value.dnssec %}
  file "/etc/bind/zones/db.{{ zone }}.signed";
{% else %}
  file "/etc/bind/zones/db.{{ zone }}";
{% endif %}
{% if 'allow_transfer' in value and value.dnssec %}
  allow-transfer {
{% for ip in value.allow_transfer %}
    {{ ip }};
{% endfor %}
  };
{% endif %}
{% if 'options' in value %}
{% for option,  opt_value in value.options.iteritems() %}
  {{ option }} {% if opt_value == True %}yes{% elif opt_value == False %}no{% else %}{{ opt_value }}{% endif %};
{% endfor %}
{% endif %}
};
{% endfor %}