# Autogenerated configuration file template
+
+#################################
+# ignore-unknown-settings Configuration settings to ignore if they are unknown
+#
+# ignore-unknown-settings=
+
#################################
# 8bit-dns Allow 8bit dns queries
#
# allow-notify-from=0.0.0.0/0,::/0
#################################
-# allow-unsigned-notify Allow unsigned notifications for TSIG secured domains
+# allow-unsigned-autoprimary Allow autoprimaries to create zones without TSIG signed NOTIFY
+#
+# allow-unsigned-autoprimary=yes
+
+#################################
+# allow-unsigned-notify Allow unsigned notifications for TSIG secured zones
#
# allow-unsigned-notify=yes
# allow-unsigned-supermaster=yes
#################################
-# also-notify When notifying a domain, also notify these nameservers
+# also-notify When notifying a zone, also notify these nameservers
#
# also-notify=
#
# api-key=
+#################################
+# autosecondary Act as an autosecondary (formerly superslave)
+#
+# autosecondary=no
+
#################################
# axfr-fetch-timeout Maximum time in seconds for inbound AXFR to start or be idle after starting
#
# cache-ttl=20
#################################
-# carbon-instance If set overwrites the the instance name default
+# carbon-instance If set overwrites the instance name default
#
# carbon-instance=auth
#
# config-name=
+#################################
+# consistent-backends Assume individual zones are not divided over backends. Send only ANY lookup operations to the backend to reduce the number of lookups
+#
+# consistent-backends=yes
+
#################################
# control-console Debugging switch - don't use
#
# default-ksk-size=0
#################################
-# default-soa-edit Default SOA-EDIT value
+# default-publish-cdnskey Default value for PUBLISH-CDNSKEY
#
-# default-soa-edit=
+# default-publish-cdnskey=
#################################
-# default-soa-edit-signed Default SOA-EDIT value for signed zones
+# default-publish-cds Default value for PUBLISH-CDS
#
-# default-soa-edit-signed=
+# default-publish-cds=
+
+#################################
+# default-soa-content Default SOA content
+#
+# default-soa-content=a.misconfigured.dns.server.invalid hostmaster.@ 0 10800 3600 604800 3600
#################################
-# default-soa-mail mail address to insert in the SOA record if none set in the backend
+# default-soa-edit Default SOA-EDIT value
#
-# default-soa-mail=
+# default-soa-edit=
#################################
-# default-soa-name name to insert in the SOA record if none set in the backend
+# default-soa-edit-signed Default SOA-EDIT value for signed zones
#
-# default-soa-name=a.misconfigured.powerdns.server
+# default-soa-edit-signed=
#################################
# default-ttl Seconds a result is valid if not set otherwise
# dnsupdate=no
#################################
-# do-ipv6-additional-processing Do AAAA additional processing
+# domain-metadata-cache-ttl Seconds to cache zone metadata from the database
#
-# do-ipv6-additional-processing=yes
-
-#################################
-# domain-metadata-cache-ttl Seconds to cache domain metadata from the database
-#
-# domain-metadata-cache-ttl=60
+# domain-metadata-cache-ttl=
#################################
# edns-subnet-processing If we should act on EDNS Subnet options
# expand-alias=no
#################################
-# forward-dnsupdate A global setting to allow DNS update packages that are for a Slave domain, to be forwarded to the master.
+# forward-dnsupdate A global setting to allow DNS update packages that are for a Slave zone, to be forwarded to the master.
#
# forward-dnsupdate=yes
#################################
# local-address Local IP addresses to which we bind
#
-# local-address=0.0.0.0
+# local-address=0.0.0.0, ::
#################################
# local-address-nonexist-fail Fail to start if one or more of the local-address's do not exist on this server
#
# local-address-nonexist-fail=yes
-#################################
-# local-ipv6 Local IP address to which we bind
-#
-# local-ipv6=::
-
-#################################
-# local-ipv6-nonexist-fail Fail to start if one or more of the local-ipv6 addresses do not exist on this server
-#
-# local-ipv6-nonexist-fail=yes
-
#################################
# local-port The port on which we listen
#
#
# lua-dnsupdate-policy-script=
+#################################
+# lua-health-checks-expire-delay Stops doing health checks after the record hasn't been used for that delay (in seconds)
+#
+# lua-health-checks-expire-delay=3600
+
+#################################
+# lua-health-checks-interval LUA records health checks monitoring interval in seconds
+#
+# lua-health-checks-interval=5
+
#################################
# lua-prequery-script Lua script with prequery handler (DO NOT USE)
#
# lua-records-exec-limit=1000
#################################
-# master Act as a master
+# master Act as a primary
#
# master=no
#
# max-ent-entries=100000
+#################################
+# max-generate-steps Maximum number of $GENERATE steps when loading a zone from a file
+#
+# max-generate-steps=0
+
#################################
# max-nsec3-iterations Limit the number of NSEC3 hash iterations
#
-# max-nsec3-iterations=500
+# max-nsec3-iterations=100
#################################
# max-packet-cache-entries Maximum number of entries in the packet cache
# prevent-self-notification=yes
#################################
-# query-cache-ttl Seconds to store query results in the QueryCache
+# primary Act as a primary
#
-# query-cache-ttl=20
+# primary=no
#################################
-# query-local-address Source IP address for sending queries
+# query-cache-ttl Seconds to store query results in the QueryCache
#
-# query-local-address=0.0.0.0
+# query-cache-ttl=20
#################################
-# query-local-address6 Source IPv6 address for sending queries
+# query-local-address Source IP addresses for sending queries
#
-# query-local-address6=::
+# query-local-address=0.0.0.0 ::
#################################
# query-logging Hint backends that queries should be logged
# rng=auto
#################################
-# security-poll-suffix Domain name from which to query security update notifications
+# secondary Act as a secondary
+#
+# secondary=no
+
+#################################
+# secondary-do-renotify If this secondary should send out notifications after receiving zone transfers from a primary
+#
+# secondary-do-renotify=no
+
+#################################
+# security-poll-suffix Zone name from which to query security update notifications
#
# security-poll-suffix=secpoll.powerdns.com.
#################################
-# send-signed-notify Send TSIG secured NOTIFY if TSIG key is configured for a domain
+# send-signed-notify Send TSIG secured NOTIFY if TSIG key is configured for a zone
#
# send-signed-notify=yes
# signing-threads=3
#################################
-# slave Act as a slave
+# slave Act as a secondary
#
# slave=no
# slave-cycle-interval=60
#################################
-# slave-renotify If we should send out notifications for slaved updates
+# slave-renotify If we should send out notifications for secondaried updates
#
# slave-renotify=no
#################################
-# soa-expire-default Default SOA expire
-#
-# soa-expire-default=604800
-
-#################################
-# soa-minimum-ttl Default SOA minimum ttl
-#
-# soa-minimum-ttl=3600
-
-#################################
-# soa-refresh-default Default SOA refresh
+# socket-dir Where the controlsocket will live, /var/run/pdns when unset and not chrooted. Set to the RUNTIME_DIRECTORY environment variable when that variable has a value (e.g. under systemd).
#
-# soa-refresh-default=10800
-
-#################################
-# soa-retry-default Default SOA retry
-#
-# soa-retry-default=3600
+# socket-dir=
#################################
-# socket-dir Where the controlsocket will live, /var/run when unset and not chrooted
+# superslave Act as a autosecondary
#
-# socket-dir=
+# superslave=no
#################################
-# superslave Act as a superslave
+# svc-autohints Transparently fill ipv6hint=auto ipv4hint=auto SVC params with AAAA/A records for the target name of the record (if within the same zone)
#
-# superslave=no
+# svc-autohints=no
#################################
# tcp-control-address If set, PowerDNS can be controlled over TCP on this address
#
# udp-truncation-threshold=1232
+#################################
+# upgrade-unknown-types Transparently upgrade known TYPExxx records. Recommended to keep off, except for PowerDNS upgrades until data sources are cleaned up
+#
+# upgrade-unknown-types=no
+
#################################
# version-string PowerDNS version in packets - full, anonymous, powerdns or custom
#
#
# write-pid=yes
+#################################
+# xfr-cycle-interval Schedule primary/secondary SOA freshness checks once every .. seconds
+#
+# xfr-cycle-interval=60
+
#################################
# xfr-max-received-mbytes Maximum number of megabytes received from an incoming XFR
#
# xfr-max-received-mbytes=100
+#################################
+# zone-cache-refresh-interval Seconds to cache list of known zones
+#
+# zone-cache-refresh-interval=300
+
+#################################
+# zone-metadata-cache-ttl Seconds to cache zone metadata from the database
+#
+# zone-metadata-cache-ttl=60