FROM docker.io/debian:12-slim
RUN apt-get update                                \
    && apt-get install -y --no-install-recommends \
        bind9                                     \
        bind9-dnsutils                            \
    && rm -rf /var/lib/apt/lists/*
COPY named.conf.options /etc/bind/
VOLUME /var/cache/bind/
EXPOSE 53/tcp 53/udp 8443/tcp
RUN chown -R root:bind /etc/bind/ /var/cache/bind/
CMD ["named", "-g", "-ubind"]