work-vm/ansible/files/domains.j2

include "/etc/bind/tf-key.conf"; // Load Terraform key

// Main domain
zone "{{ domain_name }}" in {
    type master;
    file "/var/lib/bind/db.{{ domain_name }}";
    update-policy {
      grant {{ update_key }} subdomain {{ domain_name }}. A CNAME;
    };
};

// Reverse DNS for {{ back_net }}/24
zone "{{ back_arpa }}" in {
    type master;
    file "/var/lib/bind/db.{{ back_arpa }}";
    update-policy {
      grant {{ update_key }} subdomain {{ back_arpa }}. PTR;
    };
};

// Reverse DNS for {{ front_net }}/24
zone "{{ front_arpa }}" in {
    type master;
    file "/var/lib/bind/db.{{ front_arpa }}";
    update-policy {
      grant {{ update_key }} subdomain {{ front_arpa }}. PTR;
    };
};