zone <%= @name %> {
    type master;
    file "/var/lib/bind/zones/<%= @name %>/zone.db";

    # look for dnssec keys here:
    key-directory "/etc/bind/keys/<%= @name %>";

    # publish and activate dnssec keys:
    auto-dnssec maintain;

    # use inline signing:
    inline-signing yes;
};