powerdns:
  config:
    "allow-axfr-ips":
    - ::1
    - 127.0.0.0/8
    "bind-config": /etc/powerdns/backends/bind.conf
    "config-dir": /etc/powerdns
    "daemon": "yes"
    "default-ttl": 3600
    "expand-alias": "yes"
    "guardian": "yes"
    "include-dir": "/etc/powerdns/pdns.d"
    "launch":
      bind: {}
    "master": "no"
    "resolver": 127.0.0.1
    "reuseport": "yes"
    "setgid": pdns
    "setuid": pdns
    "slave": "no"
    "soa-minimum-ttl": 300
    "tcp-control-secret": "{{ lookup('password', '/dev/null length=64') }}"
    "version-string": "1"
  zonemeta: {}
  zonemeta_defaults:
    type: native
    "allow-query":
    - any
    "allow-update":
    - none
    "allow-transfer":
    - none
    "slaves":
    - none
  zones: {}