# DO NOT EDIT - This file is being maintained by Chef

acl "osm" {
	127.0.0.1/32;
<% node.interfaces(:family => :inet).each do |interface| -%>
        <%= interface[:network] %>/<%= interface[:prefix] %>;
<% end -%>
<% @ipv4_clients.sort.each do |address| -%>
	<%= address %>/32;
<% end -%>

	::1/128;
<% node.interfaces(:family => :inet6).each do |interface| -%>
        <%= interface[:network] %>/<%= interface[:prefix] %>;
<% end -%>
<% @ipv6_clients.sort.each do |address| -%>
	<%= address %>/128;
<% end -%>
};

options {
        # Directory to use for any working files
	directory "/var/cache/bind";

<% if node[:bind][:forwarders] -%>
	# Forward any queries we can't answer
	forwarders {
<% node[:bind][:forwarders].each do |forwarder| -%>
		<%= forwarder %>;
<% end -%>
	};
<% end -%>

	# Only allow queries from our machines
	allow-query { osm; };

	# Don't allow transfers
	allow-transfer { none; };

	# Listen on any IPv6 interfaces
	listen-on-v6 { any; };
};