$TTL 86400
@		IN SOA {{ groups['master_nsdservers'] | first }}. tech.ovh.net. (
				{{ dns_serial }}; timestamp serial number
				28800; Refresh
				7200; Retry
				864000; Expire
				86400; Min TTL
			)

{% for server in groups['nsdservers'] %}
@		IN NS {{ server }}.
{% endfor %}

$ORIGIN {{ item.name }}.
@		IN CAA 0 issue "letsencrypt.org"
@		IN A 82.66.135.228
@		IN AAAA 2a01:e0a:9bd:2811::17
@		IN MX 0 .
@		3600 IN TXT	"v=spf1 -all"
@		3600 IN TXT	"spf2.0/mfrom -all"
_dmarc		3600 IN TXT	"v=DMARC1;p=reject;pct=100;sp=reject;aspf=s;"
@		3600 IN TXT	"google-site-verification=Ptj7up6CWDNVy_AQjKrJf9yY08Tu7OTE30XIgG-ISGU"
{{ web_hostname_block }}