acl "{{ domain_name }}-acl" {
{% if transfer_hosts %}
{% for ip in transfer_hosts %}
  {{ ip }};
{% endfor %}
{% else %}
  none;
{% endif %}
};

zone "{{ domain_name }}" IN {
  type master;
  file "{{ dns.paths.primary_zones }}/db.{{ domain_name }}";
  #auto-dnssec maintain;
  inline-signing yes;
  dnssec-policy default;
  serial-update-method increment;
  allow-update { none; };
  allow-transfer { {{ domain_name }}-acl; };
  notify yes;
  key-directory "{{ dns.paths.keys }}";
};