# Copyright (C) 2024-2026 Pextra Inc. All rights reserved.
.:53 {
	# Referenced in systemd-resolve configuration
	bind 127.0.0.106

	# Import drop-in configuration
	import conf.d/*.conf
	# Default upstream DNS servers (can be overriden by drop-in configuration)
	forward . 9.9.9.9 1.1.1.1 8.8.8.8

	pce {
		# Username defined in `CONFIG.COCKROACHDB.COREDNS_USER`
		datasource postgresql://user_pce_coredns@localhost:26257/pextra_ce?sslmode=verify-full&sslrootcert=/etc/pce/certs/cockroach/ca.crt&sslcert=/etc/pce/certs/cockroach/client.coredns.crt&sslkey=/etc/pce/certs/cockroach/client.coredns.key
	}

	log . {combined} {
		class denial error
	}
}
