manager: datamodel: current valid config added to design notes

diff --git a/manager/knot_resolver_manager/datamodel/design-notes.yml b/manager/knot_resolver_manager/datamodel/design-notes.yml
index 916245616dfff239cc9e131b8a71aaad168bac67..fb909acc9bfbccbf50b94434abcd2750d4f5842c 100644 (file)
--- a/manager/knot_resolver_manager/datamodel/design-notes.yml
+++ b/manager/knot_resolver_manager/datamodel/design-notes.yml
@@ -179,3 +179,59 @@ rules:
     type: forward-auth
     dnssec: no
 
+
+# @amrazek: current valid config
+
+views:
+  - subnets: [ 0.0.0.0/0, "::/0" ]
+    answer: refused
+  - subnets: [ 0.0.0.0/0, "::/0" ]
+    tags: [t01, t02, t03]
+    options:
+      minimize: true  # default
+      dns64: true     # default
+  - subnets: 10.0.10.0/24 # can be single value
+    answer: allow
+
+local-data:
+  ttl: 1d
+  nodata: true
+  addresses:
+    foo.bar: [ 127.0.0.1, "::1" ]
+    my.pc.corp: 192.168.12.95
+  addresses-files:
+    - /etc/hosts
+  records: |
+    example.net. TXT "foo bar"
+     A 192.168.2.3
+     A 192.168.2.4
+    local.example.org AAAA ::1
+  subtrees:
+    - type: empty
+      roots: [ sub2.example.org ]
+      tags: [ t2 ]
+    - type: nxdomain
+      roots-file: /path/to/file.txt
+    - type: empty
+      roots-url: https://example.org/blocklist.txt
+      refresh: 1d
+    - type: redirect
+      roots: [ sub4.example.org ]
+      addresses: [ 127.0.0.1, "::1" ]
+
+forward:
+  - subtree: '.'
+    servers:
+      - address: [ 192.0.2.1, 192.0.2.2@5353 ]
+        transport: tls
+        pin-sha256: Wg==
+      - address: 2001:DB8::d0c
+        transport: tls
+        hostname: res.example.com
+        ca-file: /etc/knot-resolver/tlsca.crt
+    options:
+      dnssec: true  # default
+  - subtree: 1.168.192.in-addr.arpa
+    servers: [ 192.0.2.1@5353 ]
+    options:
+      dnssec: false # policy.STUB?
\ No newline at end of file