options {
	directory "/var/cache/bind";

  forwarders {
    8.8.8.8;
    8.8.4.4;
  };

  dnssec-enable yes;

  allow-recursion { any; };
  allow-query { any; };
  allow-query-cache { any; };

  listen-on { 127.0.0.1; 192.168.1.116; };

	//========================================================================
	// If BIND logs error messages about the root key being expired,
	// you will need to update your keys.  See https://www.isc.org/bind-keys
	//========================================================================
	dnssec-validation yes;

	auth-nxdomain no;    # conform to RFC1035
	listen-on-v6 { any; };
};