bind: Consolidate configuration files

Add DNS master/slave support to container so that slaves don't require
any additional configuration outside of their environment.

Pull common master/slave configuration into the base container.

1 files changed, 60 insertions, 0 deletions

diff --git a/bind/conf/named.conf b/bind/conf/named.conf
new file mode 100644
index 0000000..071cea7
--- /dev/null
+++ b/bind/conf/named.conf
@@ -0,0 +1,60 @@
+// vi:ft=named
+
+include "/etc/bind/rndc.key";
+
+options {
+        directory "/etc/bind/local/cache";
+        bindkeys-file "/etc/bind/bind.keys";
+
+        //========================================================================
+        // If BIND logs error messages about the root key being expired,
+        // you will need to update your keys.  See https://www.isc.org/bind-keys
+        //========================================================================
+
+        // mcrute: disable dnssec because the AWS resolvers return invalid zone
+        // signatures
+        dnssec-validation no;
+
+        auth-nxdomain no;    # conform to RFC1035
+
+        listen-on { any; };
+        listen-on-v6 { any; };
+
+        version none;
+        hostname none;
+
+        allow-recursion {
+                internal-nets;
+                localhost;
+        };
+
+        allow-transfer {
+                internal-nets;
+                localhost;
+        };
+
+        // Allow more transfers at once to improve slave convergence
+        transfers-in 30;
+        transfers-out 30;
+};
+
+controls {
+        inet 127.0.0.1 allow { localhost; } keys { "rndc-key"; };
+        inet ::1 allow { localhost; } keys { "rndc-key"; };
+};
+
+acl internal-nets {
+        172.16.0.0/16;           // SEA1 - AWS
+        172.17.0.0/16;           // SEA2
+        172.18.0.0/16;           // FKL1
+
+        2001:470:e8d1::/48;      // SEA1 Big Block
+        2001:470:b:130::/64;     // SEA1
+        2600:1f14:f39:e000::/56; // PDX1
+        2600:1f16:33:500::/56;   // CMH1
+        2a05:d01c:7ba:b800::/56; // LHR1
+
+        192.168.255.0/24;        // Local Docker Bridge
+};
+
+include "/etc/bind/local/zones.conf";