{
  "hosts": {
    "public":  "= nodes['dns.public' => true].fields('domain.name', 'dns.aliases', 'ip_address')",
    "private": "= nodes['dns.public' => false].fields('domain.name', 'dns.aliases', 'ip_address')"
  },
  "service_type": "public_service",
  "firewall": {
    "dns": {
      "from": "*",
      "to": "= ip_address",
      "port": "53"
    }
  }
}