dns/named.conf

// vim:set ts=4 sw=4 et:

include "/etc/bind.keys";
include "/etc/rndc.key";
include "/etc/named/evenet.key";
include "/etc/named/chelnok.key";
include "/etc/named/openvpn.key";

server 188.226.214.194 {
  transfer-format many-answers;
  keys { dns1-dns2.dn42.higgsboson.tk.;};
};

server 2a03:b0c0:0:1010::3d:b002 {
  transfer-format many-answers;
  keys { dns1-dns2.dn42.higgsboson.tk.;};
};

server 89.238.64.7 {
  transfer-format many-answers;
  keys { ns.chelnok.de-ns1.higgsboson.tk.;};
};
server 2a00:1828:2000:289::4 {
  transfer-format many-answers;
  keys { ns.chelnok.de-ns1.higgsboson.tk.;};
};

options {
  directory "/etc/named/zones";
  pid-file "/run/named/named.pid";

  listen-on { any; };
  listen-on-v6 { any; };

  allow-transfer {
    key dns1-dns2.dn42.higgsboson.tk.;
    key ns.chelnok.de-ns1.higgsboson.tk.;
  };
  allow-update { none; };

  hostname none;
  server-id none;

  dnssec-enable yes;
  dnssec-validation no;
  dnssec-lookaside auto;

  disable-empty-zone "255.255.255.255.in-addr.arpa";
  disable-empty-zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa";
  disable-empty-zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa";
};

controls {
  inet 127.0.0.1 allow { localhost; } keys { "rndc-key"; };
};

view "external" {
  match-clients {
    !10/8;
    !172.16/12;
    !192.168/16;
    !fc00::/7;
    0.0.0.0/0;
    ::/0;
  };
  recursion no;
  notify no;
  include "/etc/named/default-zones.conf";
  include "/etc/named/dn42.conf";
  include "/etc/named/freifunk.conf";

  zone "dyn.higgsboson.tk" {
    type master;
    notify true;
    file "dyn.higgsboson.tk.zone";
    allow-update { key openvpnupdate; };
  };

  zone "higgsboson.tk" {
    type master;
    notify true;
    file "higgsboson.tk.zone";
  };

  zone "eve.higgsboson.tk" {
    type master;
    notify yes;
    file "eve.higgsboson.tk.zone";
  };
  #zone "eva.higgsboson.tk" {
  #  type master;
  #  masters { 188.226.214.194; 2a03:b0c0:0:1010::3d:b002; };
  #  file "eva.higgsboson.tk.zone";
  #};

  zone "chelnok.de" {
    type slave;
    masters { 89.238.64.7; 2a00:1828:2000:289::4; };
    file "chelnok.de.zone";
  };
  zone "9.8.2.0.0.0.2.8.2.8.1.0.0.a.2.ip6.arpa" {
    type slave;
    masters { 89.238.64.7; 2a00:1828:2000:289::4; };
    file "9.8.2.0.0.0.2.8.2.8.1.0.0.a.2.ip6.arpa";
  };
  zone "nek0.eu." {
    type slave;
    masters { 89.238.64.7; 2a00:1828:2000:289::4; };
    file "nek0.eu.zone";
  };
};

view "eve" {
  match-clients {
    192.168.66.0/24;
    2a01:4f8:210:31fd::1/64;
    127.0.0.0/8;
  };

  allow-recursion { any; };
  include "/etc/named/default-zones.conf";
  include "/etc/named/dn42-refer.conf";
  include "/etc/named/freifunk.conf";

  zone "dyn.higgsboson.tk" { in-view "external"; };
  zone "higgsboson.tk" {
    type master;
    notify true;
    file "internal-eve.higgsboson.tk.zone";
  };
  zone "eve.higgsboson.tk" { in-view "external"; };
  //zone "eva.higgsboson.tk" { in-view "external"; };

  zone "chelnok.de" { in-view "external"; };
  zone "9.8.2.0.0.0.2.8.2.8.1.0.0.a.2.ip6.arpa" { in-view "external"; };
  zone "nek0.eu." { in-view "external"; };

  # v4 eve
  zone "66.168.192.in-addr.arpa" {
    type master;
    notify yes;
    file "66.168.192.in-addr.arpa";
  };

  # v6 eve
  zone "1.0.0.0.d.f.1.3.0.1.2.0.8.f.4.0.1.0.a.2.ip6.arpa" {
    type master;
    notify yes;
    file "1.0.0.0.d.f.1.3.0.1.2.0.8.f.4.0.1.0.a.2.ip6.arpa";
  };

  # v6 eva
  zone "0.0.b.d.3.0.0.0.0.0.0.0.0.0.0.0.1.0.1.0.0.0.0.0.c.0.b.3.0.a.2.ip6.arpa." {
    type slave;
    masters { 188.226.214.194; 2a03:b0c0:0:1010::3d:b002; };
    file "0.0.b.d.3.0.0.0.0.0.0.0.0.0.0.0.1.0.1.0.0.0.0.0.c.0.b.3.0.a.2.ip6.arpa";
  };
};

view "eva" {
  match-clients {
    192.168.67.0/24;
    2a03:b0c0:2:d0::2a5:f000/124;
  };

  include "/etc/named/default-zones.conf";
  include "/etc/named/dn42-refer.conf";
  include "/etc/named/freifunk.conf";

  allow-recursion { any; };
  zone "dyn.higgsboson.tk" { in-view "external"; };
  zone "higgsboson.tk" {
    type master;
    notify true;
    file "internal-eva.higgsboson.tk.zone";
  };
  zone "eve.higgsboson.tk" { in-view "external"; };
  //zone "eva.higgsboson.tk" { in-view "external"; };

  zone "chelnok.de" { in-view "external"; };
  zone "9.8.2.0.0.0.2.8.2.8.1.0.0.a.2.ip6.arpa" { in-view "external"; };
  zone "nek0.eu." { in-view "external"; };

  # v4 eve
  zone "66.168.192.in-addr.arpa" { in-view "eve"; };
  # v6 eve
  zone "1.0.0.0.d.f.1.3.0.1.2.0.8.f.4.0.1.0.a.2.ip6.arpa" { in-view "eve"; };
  # v6 eva
  zone "0.0.b.d.3.0.0.0.0.0.0.0.0.0.0.0.1.0.1.0.0.0.0.0.c.0.b.3.0.a.2.ip6.arpa." { in-view "eve"; };
};

view "evenet" {
  match-clients {
    172.16.0.0/12;
    10.0.0.0/8;
    fc00::/7;
  };

  allow-recursion { any; };
  include "/etc/named/default-zones.conf";
  include "/etc/named/dn42-refer.conf";
  include "/etc/named/freifunk.conf";

  zone "higgsboson.tk" { in-view "external"; };
  zone "dyn.higgsboson.tk" { in-view "external"; };
  zone "eve.higgsboson.tk" { in-view "external"; };
  //zone "eva.higgsboson.tk" { in-view "external"; };

  zone "chelnok.de" { in-view "external"; };
  zone "9.8.2.0.0.0.2.8.2.8.1.0.0.a.2.ip6.arpa" { in-view "external"; };
  zone "nek0.eu." { in-view "external"; };
};

logging {
  channel journald {
    syslog daemon;
    print-category yes;
    print-severity yes;
    severity info;
  };
  category default { journald; };
};