# {{ ansible_managed }}
{% for zone, value in bind_zones.iteritems() %}

zone "{{ zone }}" IN {
	type master;
{% if 'dnssec' in value and value.dnssec %}
	file "/etc/bind/zones/db.{{ zone }}.signed";
{% else %}
	file "/etc/bind/zones/db.{{ zone }}";
{% endif %}
{% if 'allow_transfer' in value and value.dnssec %}
	allow-transfer {
{% for ip in value.allow_transfer %}
    {{ ip }};
{% endfor %}
  };
{% endif %}
};
{% endfor %}