$TTL 86400
@		IN SOA {{ groups['master_nsdservers'] | first }}. tech.ovh.net. (
				{{ dns_serial }}; timestamp serial number
				28800; Refresh
				7200; Retry
				864000; Expire
				86400; Min TTL
			)

{% for server in groups['nsdservers'] %}
@		IN NS {{ hostvars[server].ansible_host }}.
{% endfor %}

$ORIGIN {{ item.name }}.
@		IN CAA 0 issue "letsencrypt.org"
@		IN MX 1 mail.dmz.mateu.be.
@		3600 IN TXT "v=spf1 mx a:ks3370405.kimsufi.com -all"
@		3600 IN TXT "spf2.0/mfrom mx a:ks3370405.kimsufi.com -all"
_dmarc		3600 IN TXT "v=DMARC1; p=reject; rua=mailto:report@mateu.be; adkim=s; aspf=s"
dkim._domainkey		3600 IN TXT "v=DKIM1; k=rsa; t=s; s=email; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCv3kGIw5015Q35LLbkGwaBE+wC0PseodezDdkoGwzRsazEWINv1bg0mCIjtDbXLpv5VgRSynRyB+764i15DoFJp6mabcHlXxQVBWMClAtCJ9+Fn6SEwQjFbQeuFVQKH3xMwIq0S+ggP7qhFTaiLBn909Fi8oEMXGvqbBSlvoaeJwIDAQAB"
_jabber._tcp		IN SRV 0 0 5269 jabber.dmz.mateu.be.
_xmpp-client._tcp		IN SRV 0 0 5222 jabber.dmz.mateu.be.
_xmpp-server._tcp		IN SRV 0 0 5269 jabber.dmz.mateu.be.
_xmppconnect		IN TXT "_xmpp-client-xbosh=https://xmpp.libertus.eu/http-bind"
altsrv		IN CNAME ks3370405.kimsufi.com.
p		IN MX 1 mail.dmz.mateu.be.
p		3600 IN TXT "v=spf1 mx a:ks3370405.kimsufi.com -all"
p		3600 IN TXT "spf2.0/mfrom mx a:ks3370405.kimsufi.com -all"
_dmarc.p		3600 IN TXT "v=DMARC1; p=reject; rua=mailto:report@mateu.be; adkim=s; aspf=s"
dkim._domainkey.p		3600 IN TXT "v=DKIM1; k=rsa; t=s; s=email; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCv3kGIw5015Q35LLbkGwaBE+wC0PseodezDdkoGwzRsazEWINv1bg0mCIjtDbXLpv5VgRSynRyB+764i15DoFJp6mabcHlXxQVBWMClAtCJ9+Fn6SEwQjFbQeuFVQKH3xMwIq0S+ggP7qhFTaiLBn909Fi8oEMXGvqbBSlvoaeJwIDAQAB"
{{ web_hostname_block }}