+TRUST_ANCHOR=".,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5"
+
+function dnssec_args() {
+ local cmdline="--dnssec --dnssec-timestamp"
+
+ if [ -n "${TRUST_ANCHOR}" ]; then
+ cmdline="${cmdline} --trust-anchor=${TRUST_ANCHOR}"
+ fi
+
+ echo "${cmdline}"
+}
+
+function dns_forward_args() {
+ local file="${1}"
+
+ # Do nothing if file is empty.
+ [ -s "${file}" ] || return
+
+ local cmdline
+
+ local enabled zone server remark
+ while IFS="," read -r enabled zone server remark; do
+ # Line must be enabled.
+ [ "${enabled}" = "on" ] || continue
+
+ cmdline="${cmdline} --server=/${zone}/${server}"
+ done < ${file}
+
+ echo "${cmdline}"
+}