options {
            listen-on port 53 { any; }; 
            listen-on-v6 port 53 { ::1; }; 
            directory       "/var/named"; 
            dump-file       "/var/named/data/cache_dump.db"; 
            statistics-file "/var/named/data/named_stats.txt"; 
            memstatistics-file "/var/named/data/named_mem_stats.txt"; 
            secroots-file   "/var/named/data/named.secroots"; 
            recursing-file  "/var/named/data/named.recursing"; 
            allow-query     { any; }; 
            recursion no; 
            dnssec-enable yes; 
            dnssec-validation yes; 
            managed-keys-directory "/var/named/dynamic"; 
            pid-file "/run/named/named.pid"; 
            session-keyfile "/run/named/session.key"; 
            /* https://fedoraproject.org/wiki/Changes/CryptoPolicy */
            include "/etc/crypto-policies/back-ends/bind.config"; 
    }; 
    logging {
            channel default_debug {
                    file "data/named.run";
                    severity dynamic;
            };
    };
    zone "domain.tld" {
        type slave;
        file "domain.tld.db";
        masters { 100.100.100.100; };
    };