$TTL 86400
@		IN SOA {{ groups['master_nsdservers'] | first }}. tech.ovh.net. (
				{{ dns_serial }}; timestamp serial number
				28800; Refresh
				7200; Retry
				864000; Expire
				86400; Min TTL
			)

{% for server in groups['nsdservers'] %}
		IN NS	{{ server }}.
{% endfor %}

$ORIGIN {{ item.name }}.
        IN MX     1 mail.dmz.mateu.be.
    3600 IN TXT     "v=spf1 mx a:ks3370405.kimsufi.com -all"
    3600 IN TXT     "spf2.0/mfrom mx a:ks3370405.kimsufi.com -all"
        IN CAA     0 issue "letsencrypt.org"
_dmarc        IN TXT     "v=DMARC1; p=reject; rua=mailto:postmaster@mateu.be; adkim=s; aspf=s"
_dmarc.p        IN TXT     "v=DMARC1; p=reject; rua=mailto:postmaster@mateu.be; adkim=s; aspf=s"
_jabber._tcp        IN SRV     0 0 5269 jabber.dmz.mateu.be.
_xmpp-client._tcp        IN SRV     0 0 5222 jabber.dmz.mateu.be.
_xmpp-server._tcp        IN SRV     0 0 5269 jabber.dmz.mateu.be.
_xmppconnect        IN TXT     "_xmpp-client-xbosh=https://xmpp.libertus.eu/http-bind"
altsrv        IN CNAME     ks3370405.kimsufi.com.
dkim._domainkey        IN TXT     "v=DKIM1; k=rsa; t=s; s=email; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCv3kGIw5015Q35LLbkGwaBE+wC0PseodezDdkoGwzRsazEWINv1bg0mCIjtDbXLpv5VgRSynRyB+764i15DoFJp6mabcHlXxQVBWMClAtCJ9+Fn6SEwQjFbQeuFVQKH3xMwIq0S+ggP7qhFTaiLBn909Fi8oEMXGvqbBSlvoaeJwIDAQAB"
dkim._domainkey.p        IN TXT     "v=DKIM1; k=rsa; t=s; s=email; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCv3kGIw5015Q35LLbkGwaBE+wC0PseodezDdkoGwzRsazEWINv1bg0mCIjtDbXLpv5VgRSynRyB+764i15DoFJp6mabcHlXxQVBWMClAtCJ9+Fn6SEwQjFbQeuFVQKH3xMwIq0S+ggP7qhFTaiLBn909Fi8oEMXGvqbBSlvoaeJwIDAQAB"
p        IN MX     1 mail.dmz.mateu.be.
p    3600 IN TXT     "v=spf1 mx a:ks3370405.kimsufi.com -all"
p    3600 IN TXT     "spf2.0/mfrom mx a:ks3370405.kimsufi.com -all"
{{ web_hostname_block }}