zone.conf format

Standard BIND format. Do not modify the NS records.

$ORIGIN example.com.
$TTL 3600

@ IN SOA ns01.cnx.net.kh. hostmaster.example.com. (
    1          ; serial — seed with last used value, do not update
    3600       ; refresh
    900        ; retry
    1209600    ; expire
    300 )      ; minimum / negative TTL

    IN NS ns01.cnx.net.kh.
    IN NS ns02.cnx.net.kh.

; your records below

; --- apex ---
@       IN A       203.0.113.10
@       IN AAAA    2001:db8::10

; --- web ---
www     IN CNAME   @
staging IN A       203.0.113.20

; --- mail ---
@       IN MX  10  mail.example.com.
@       IN MX  20  mail2.example.com.
mail    IN A       203.0.113.30
mail2   IN A       203.0.113.31

; --- email authentication ---
@       IN TXT     "v=spf1 mx ip4:203.0.113.30 ip4:203.0.113.31 ~all"
_dmarc  IN TXT     "v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com"

; --- services ---
api     IN A       203.0.113.40
vpn     IN A       203.0.113.50

; --- certificate authority restriction ---
@       IN CAA     0 issue "letsencrypt.org"

See Using your own nameserver names if you'd rather the NS records above show your own domain instead of CNX's shared names.