include "/etc/bind/rndc.key"; include "/etc/bind/keys/wan.key"; include "/etc/bind/keys/lan.key"; include "/etc/bind/keys/certbot.key"; include "/etc/bind/keys/dhcp.key"; server fe80::/16 { bogus yes; }; acl lan { 10.0.0.0/8; 172.16.0.0/12; 192.168.0.0/16; }; acl rfc5735 { 0.0.0.0/8; 169.254.0.0/16; 192.0.0.0/24; 192.0.2.0/24; 192.88.99.0/24; 198.18.0.0/15; 198.51.100.0/24; 203.0.113.0/24; 224.0.0.0/4; 240.0.0.0/4; }; controls { inet * allow { localhost; lan; } keys { "rndc-key"; }; };