\$TTL 60
@            IN    SOA  localhost. root.localhost.  (
                      4   ; serial
                      3H  ; refresh
                      1H  ; retry
                      1W  ; expiry
                      1H) ; minimum

                      IN     NS      localhost.

${tld:-lixo}                         CNAME   rpz-passthru.
*.${tld:-lixo}                       CNAME   rpz-passthru.
{{ range "$root_reverse_zones" | split "," }}*.{{ . }}                       CNAME   rpz-passthru.
{{ end }}