#!/bin/bash
# {{ ansible_managed }}

cd /etc/bind/keys

{% for zone  in bind_dnssec %}
dnssec-signzone -3 $(head -n 1000 /dev/urandom | sha1sum | cut -b 1-16) -A -N INCREMENT -o {{ zone }} -t /etc/bind/zones/{{ zone }}/db
{% endfor %}

systemctl reload bind9