powerdns:
  config:
    "allow-axfr-ips":
    - ::1
    - 127.0.0.0/8
    "bind-config": /etc/powerdns/backends/bind.conf
    "config-dir": /etc/powerdns
    "daemon": "yes"
    "default-ttl": 3600
    "guardian": "yes"
    "include-dir": "/etc/powerdns/pdns.d"
    "launch":
    - bind
    "master": no
    "reuseport": "yes"
    "setgid": pdns
    "setuid": pdns
    "slave": no
    "soa-minimum-ttl": 300
    "tcp-control-secret": "{{ lookup('password', '/dev/null length=64') }}"
    "version-string": "1"
  zonemeta: {}
  zones: {}