logging {
  category default {
    default_stderr;
  };
};

key "key-internal" {
    algorithm HMAC-MD5;
    secret "DNS_TSIG_KEY_INTERNAL_SECRET";
};

key "key-external" {
    algorithm HMAC-MD5;
    secret "DNS_TSIG_KEY_EXTERNAL_SECRET";
};

key "key-rndc" {
    algorithm HMAC-MD5;
    secret "DNS_TSIG_KEY_RNDC_SECRET";
};

acl "acl-internal" {
  !key "key-external";
  key "key-internal";
  192.168.0.0/16;
  172.16.0.0/12;
  10.0.0.0/8;
  localhost;
};

acl "acl-external" {
  !key "key-internal";
  key "key-external";
  any;
};

masters "masters-example.com-internal" {
  10.10.0.1 key "key-internal";
};

masters "masters-example.com-external" {
  10.10.0.1 key "key-external";
};

options {
  directory "/var/cache/bind";
  dnssec-validation auto;
  auth-nxdomain no;
  listen-on-v6 {
    none;
  };
  masterfile-format text;
  notify explicit;
};

controls {
  inet 127.0.0.1 allow {
    localhost;
  } keys {
    "key-rndc";
  };
};

include "/etc/bind/named.conf.local";