xref: /openbsd/etc/nsd.conf (revision 5f88acbb)
1# $OpenBSD: nsd.conf,v 1.13 2018/08/16 17:59:12 florian Exp $
2
3server:
4	hide-version: yes
5	verbosity: 1
6	database: "" # disable database
7
8## bind to a specific address/port
9#	ip-address: 192.0.2.53
10#	ip-address: 192.0.2.53@5678
11#	ip-address: 2001:db8::53
12
13## make packets as small as possible, on by default
14#	minimal-responses: yes
15
16## respond with truncation for ANY queries over UDP and allow ANY over TCP,
17## on by default
18#	refuse-any: yes
19
20remote-control:
21	control-enable: yes
22	control-interface: /var/run/nsd.sock
23
24## tsig key example
25#key:
26#	name: "tsig1.example.com."
27#	algorithm: hmac-sha256
28#	secret: "bWVrbWl0YXNkaWdvYXQ="
29
30## master zone example
31#zone:
32#	name: "example.com"
33#	zonefile: "master/example.com"
34#	notify: 192.0.2.1 NOKEY
35#	provide-xfr: 192.0.2.1 NOKEY
36
37## slave zone example
38#zone:
39#	name: "example.net"
40#	zonefile: "slave/example.net"
41#	allow-notify: 192.0.2.2 tsig1.example.com.
42#	request-xfr: 192.0.2.2 tsig1.example.com.
43
44## dynamically configured zones, used with "nsd-control addzone/delzone".
45## filenames are constructed using the pattern: %s - zone name.
46## %1 - first character of zone name, %2 second, ## %3 third.
47## %z - topleveldomain label of zone, %y, %x next labels in name.
48#pattern:
49#	name: "master"
50#	zonefile: "master/%s.zone"
51#	notify: 192.0.2.1 NOKEY
52#	provide-xfr: 192.0.2.1 NOKEY
53