config
{
    profiles:
    {
      infra:
      {
          subjectRegexp:      ".*@example.org"
          type:               "ldap"
          servers:            [ "ldap" ]
          bindCn:             "cn=admin,dc=example,dc=org"
          bindPw:             "admin"
          baseDN:             "ou=users,dc=example,dc=org"
          searchFilter:       "(&(mail=%s))"
          attribute:          "description"
          pgpAttribute:       "pgpKey"
          ssl:                false
          validValues:        [ "infra", "vwf" ]
      }
      testS2S:
      {
          subjectRegexp:      "validserver"
          type:               regexp
          pgpKeys:            "{{<fixtures/test/public-key.txt}}"
      }
    }
    pdnsAcls:
    {
        "testS2S":
        {
            regexp:            ".*"
            perms:             ["r", "w"]
            profiles:          [ "testS2S" ]
        },
        "admin":
        {
            regexp:            ".*"
            perms:             ["r", "w"]
            profiles:          [ "infra" ]
        },
        "writeTest":
        {
            regexp:            "zones/specificdomain.example"
            perms:             ["r", "w"]
            profiles:          [ "testS2S" ]
        },
    }
    jrpcAcls:
    {
       "admin"
       {
           perms
           {
               "*":           [ ".*" ]
           }
           pgpProfiles:       [ "testS2S" ]
       },
    }
    http:
    {
        port:       "127.0.0.1:8443"
        ca:         "fixtures/test/ca.crt"
        key:        "fixtures/test/server-key.pem"
        cert:       "fixtures/test/server-cert.pem"
        crl:        "fixtures/test/root.crl.pem"
    }
    pdns:
    {
        api-key:    "123password"
        api-url:    "http://127.0.0.1:8081/api/v1/servers/localhost"
        defaultTTL: 172800
    }
    zoneProfile:
    {
        Native:
        {
            nameservers:   [ "a.example.org.", "b.example.org." ]
            default:       true
            autoIncrement: false
            soa:           "a.example.org. admin.example.com. 0 10380 3600 604800 3600"
            populate
            {
                spf
                {
                           name:  ""
                           type:  "txt"
                           value: "v=spf1 -all"
                }
            }
        }
        Master:
        {
            nameservers:   [ "private-01.example.org.", "private-02.example.org." ]
            soa:           "private-01.example.org. admin.priv.example.com. 0 10380 3600 604800 3600"
            autoIncrement: false
            whenRegexp
            [
               "(^|.*[^.]\\.)10\\.in-addr\\.arpa",
               "(^|.*[^.]\\.)168\\.192\\.in-addr\\.arpa",
               "(^|.*[^.]\\.)(1[6-9]|2[0-9]|3[0-1])\\.172\\.in-addr\\.arpa",
               "(^|.*[^.]\\.)(6[4-9]|[7-9][0-9]|1([0-1][0-9]|2[0-7]))\\.100\\.in-addr\\.arpa",
            ]
        }
    }
}