Callers get a session API, typed RR builders, and BIND testcontainer proof so CheckDNS can stay off the DNS wire. Co-authored-by: Cursor <cursoragent@cursor.com>
34 lines
734 B
Plaintext
34 lines
734 B
Plaintext
options {
|
|
directory "/var/cache/bind";
|
|
listen-on port 53 { any; };
|
|
listen-on-v6 { none; };
|
|
allow-query { any; };
|
|
recursion no;
|
|
dnssec-validation no;
|
|
pid-file none;
|
|
};
|
|
|
|
logging {
|
|
channel stderr_log {
|
|
stderr;
|
|
severity info;
|
|
print-time yes;
|
|
print-category yes;
|
|
};
|
|
category default { stderr_log; };
|
|
category update { stderr_log; };
|
|
category update-security { stderr_log; };
|
|
};
|
|
|
|
key "go-dns-test" {
|
|
algorithm hmac-sha256;
|
|
secret "dGVzdC1maXh0dXJlLWhtYWMtc2hhMjU2LWtleSEhISE=";
|
|
};
|
|
|
|
zone "example.test" {
|
|
type master;
|
|
file "/var/cache/bind/db.example.test";
|
|
allow-update { key "go-dns-test"; };
|
|
allow-transfer { key "go-dns-test"; };
|
|
};
|