#!/bin/bash

set -euo pipefail

NAMED_CONF="/etc/named"

if [ ! -s "$NAMED_CONF/rndc.key" ] && [ ! -s "$NAMED_CONF/rndc.conf" ]; then
	/usr/bin/rndc-confgen -a -A hmac-sha256 > /dev/null 2>&1
	chmod 640 "$NAMED_CONF/rndc.key"
	chown named:named "$NAMED_CONF/rndc.key"
fi
