ansible-collection-nameserver/roles/replica/templates/etc/nsd/nsd.conf.d/10-replica.conf.j2

{{ ansible_managed | comment }}

#
#  Replica for zones of primary {{ primary }}
#

pattern:
  name: xfr-{{ primary }}
  zonefile: "/var/lib/nsd/replica/%szone"
{% for addr in masters %}
  allow-notify: {{ addr }} NOKEY
{% endfor %}
{% for addr in masters %}
  request-xfr: {{ addr }} NOKEY
{% endfor %}

{% for zone in zones %}
zone:
  name: {{ zone }}.
  include-pattern: "xfr-{{ primary }}"
{% endfor %}