// validating resolver

options {
	query-source address 10.53.0.3;
	notify-source 10.53.0.3;
	transfer-source 10.53.0.3;
	port @PORT@;
	pid-file "named.pid";
	listen-on { 10.53.0.3; };
	listen-on-v6 { none; };
	recursion yes;
	dnssec-validation yes;
	synth-from-dnssec yes;
};

{% include "_common/controls.conf.j2" %}

zone "." {
	type hint;
	file "../../_common/root.hint";
};

zone "p22.hack" {
	type static-stub;
	server-addresses { 10.53.0.1; };
};

trust-anchors {
	p22.hack. static-key 257 3 13 "@PARENT_DNSKEY@";
};