//
// Special setup

// sub.tld configured on: 10.0.53.203  
//

options {
	dnssec-enable yes;
        pid-file "named.pid";
	listen-on {10.0.53.208;};
	recursion no;	
};


zone "." {
	type hint;
	file "root.hints";
};


zone "eg.secret-wg.org" {
	type master;
	file "eg.secret-wg.org";
};


#zone "test.foo" {
#	type master;
#	file "test.foo.signed";
#};




logging {
        channel syslog_channel {
                syslog daemon;        // end to syslog's daemon
                severity debug 6;
                print-severity yes;
                 print-category yes;
        };
        channel query_channel {
                file "log/querylog.log" size  5m ;
                print-time yes;
        };

        channel update_channel {
                file "log/notify+update.log" size 5m;
                print-time yes;
               severity debug 5;
        };
        
        channel notify_channel {
                file "log/notify+update.log" size 5m;

                severity debug 6;
                print-time yes;
        };

        channel everything_else {
                file "log/runlog.log" size 5m;
                print-time yes;
                severity debug 6;
                print-severity yes;
                print-category yes;
        };


        channel dnssec_log {                 // a DNSSEC log channel
                file "log/dnssec.log" size 20m;
                print-time yes;                 // timestamp the entries
                print-category yes;             // add category name to entries
                print-severity yes;             // add severity level to entries                
                severity debug 6;               // print debug message <= 3 t

        };
        category dnssec  { dnssec_log;  };
        category security { dnssec_log;  };
        category queries { query_channel; };
        category update  { update_channel; syslog_channel; };
        category notify  { notify_channel; syslog_channel; };
        category default { everything_else; };
};