# {{ ansible_managed }}

options {
	directory "/var/cache/bind";

	dnssec-enable yes;
	dnssec-validation yes;
	dnssec-lookaside auto;

	auth-nxdomain no;    # conform to RFC1035
	listen-on { {% if bind_listen_ipv4 %}any{% else %}none{% endif %}; };
	listen-on-v6 { {% if bind_listen_ipv6 %}any{% else %}none{% endif %}; };

	version none;
};