--
-- WARNING: auto-generated by Ansible powerdns-recursor role.
--
-- Debian default Lua configuration file for PowerDNS Recursor
-- Load DNSSEC root keys from dns-root-data package.
-- Note: If you provide your own Lua configuration file, consider
-- running rootkeys.lua too.
dofile("/usr/share/pdns-recursor/lua-config/rootkeys.lua")
{% if root_cached == 'file' %}
zoneToCache(".", "file", "/etc/powerdns/root.zone", { refreshPeriod = 0 })
{% else %}
zoneToCache(".", "url", "https://www.internic.net/domain/root.zone", { refreshPeriod = 0 })
{% endif %}
{% if nta_lst is defined and nta_lst | length > 0 %}
{% for zone, description in nta_lst.items() %}
addNTA("{{ zone }}", "{{ description }}")
{% endfor %}
{% endif %}