classes:
- service.bind.server.single
parameters:
  _param:
    designate_bind9_rndc_algorithm: hmac-sha512
  designate:
    server:
      backend:
        bind9:
          rndc_key: "${_param:designate_bind9_rndc_key}"
          rndc_algorithm: "${_param:designate_bind9_rndc_algorithm}"
  bind:
    server:
      key:
        designate:
          secret: "${_param:designate_bind9_rndc_key}"
          algorithm: "${_param:designate_bind9_rndc_algorithm}"
      allow_new_zones: true
      query: true
      control:
        local:
          enabled: true
          bind:
            address: 127.0.0.1
            port: 953
          allow:
            - 127.0.0.1
            - ${_param:single_address}
          keys:
            - designate
    client:
      enabled: true
      option:
        default:
          server: ${_param:single_address}
          port: 953
          key: designate
      key:
        designate:
          secret: "${_param:designate_bind9_rndc_key}"
          algorithm: "${_param:designate_bind9_rndc_algorithm}"