named.conf.options on SRV1

acl "trusted" {
        192.168.182.128;        # client
        192.168.182.129;        # srv1
        192.168.182.130;        # srv2
};
options {
        directory "/var/cache/bind";

        recursion yes;
        allow-recursion {trusted;};
        listen-on {192.168.182.129;};
        allow-transfer{none;};
        forwarders {
                8.8.8.8;
                8.8.4.4;
        };

        //========================================================================
        // If BIND logs error messages about the root key being expired,
        // you will need to update your keys.  See https://www.isc.org/bind-keys
        //========================================================================
        dnssec-validation auto;

        listen-on-v6 { any; };
};