include "/etc/bind/pri/dynamic.keys";

zone "dynamic.dehnerts.com" IN {
	type master;
	file "/etc/bind/dyn/dynamic.zone";
	update-policy {
            grant * selfsub * A TXT;
            grant adehnert-pi4.dynamic.dehnerts.com name _acme-challenge.duck-dacha.dynamic.dehnerts.com TXT;
            grant adehnert-pi4.dynamic.dehnerts.com name _acme-challenge.homeassistant.dynamic.dehnerts.com TXT;
            grant adehnert-pi4.dynamic.dehnerts.com name _acme-challenge.pihole.dynamic.dehnerts.com TXT;
            grant adehnert-pi4.dynamic.dehnerts.com name _acme-challenge.unifi.dynamic.dehnerts.com TXT;
            grant xidi.dynamic.dehnerts.com name _acme-challenge.duck-dacha.dynamic.dehnerts.com TXT;
            grant xidi.dynamic.dehnerts.com name _acme-challenge.homeassistant.dynamic.dehnerts.com TXT;
            grant xidi.dynamic.dehnerts.com name _acme-challenge.pihole.dynamic.dehnerts.com TXT;
            grant xidi.dynamic.dehnerts.com name _acme-challenge.unifi.dynamic.dehnerts.com TXT;
        };
	allow-transfer { "transfer-allowed"; };
	allow-query { any; };
	also-notify { "secondary-ns"; };
};