# {{ ansible_managed }}

options {
  directory "/var/cache/bind";

  dnssec-enable yes;
  dnssec-validation yes;
  dnssec-lookaside auto;

  auth-nxdomain no;    # conform to RFC1035
  listen-on { {% if bind_listen_ipv4 %}any{% else %}none{% endif %}; };
  listen-on-v6 { {% if bind_listen_ipv6 %}any{% else %}none{% endif %}; };

{% for option,  value in bind_options.items() %}
  {{ option }} {% if value == True %}yes{% elif value == False %}no{% else %}{{ value }}{% endif %};
{% endfor %}

  version none;
};