acl "trusted" {
  <%= @node.bind.trusted_subnets.map {|ip| "#{ip};" }.join(" ") -%>
};

options {
  directory "/var/cache/bind";
  pid-file "/run/named/named.pid";
  auth-nxdomain yes;
  datasize default;
  listen-on-v6 { any; };
  listen-on { any; };

  forwarders { <%= @node.bind.forwarders.map {|ip| "#{ip};" }.join(" ") -%> };
  allow-query { trusted; };
  allow-recursion { trusted; };
  allow-query-cache { trusted; };

  allow-transfer { none; };
  allow-update { none; };
  version none;
  hostname none;
  server-id none;
};