2021-09-28 12:11:58 +02:00
|
|
|
server:
|
2021-10-27 13:47:17 +02:00
|
|
|
chroot: /etc/unbound
|
|
|
|
|
|
2021-09-28 12:11:58 +02:00
|
|
|
do-ip4: yes
|
|
|
|
|
do-ip6: no
|
|
|
|
|
|
2021-10-27 13:47:17 +02:00
|
|
|
interface: 0.0.0.0@53
|
|
|
|
|
port: 53
|
|
|
|
|
|
|
|
|
|
# tls-upstream: yes
|
|
|
|
|
# tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
|
2021-10-27 14:27:11 +02:00
|
|
|
|
|
|
|
|
# initially create using unbound-anchor -a /etc/unbound/root.key
|
|
|
|
|
auto-trust-anchor-file: /etc/unbound/root.key
|
2021-10-27 13:47:17 +02:00
|
|
|
|
|
|
|
|
tls-service-key: /etc/unbound/privkey.pem
|
|
|
|
|
tls-service-pem: /etc/unbound/pubcert.pem
|
|
|
|
|
interface: 0.0.0.0@853
|
|
|
|
|
tls-port: 853
|
|
|
|
|
|
|
|
|
|
num-threads: 2
|
|
|
|
|
|
2021-10-27 14:27:11 +02:00
|
|
|
# curl https://www.internic.net/domain/named.root > /etc/unbound/root.hints
|
2021-10-27 13:47:17 +02:00
|
|
|
root-hints: /etc/unbound/root.hints
|
|
|
|
|
|
2021-09-28 12:11:58 +02:00
|
|
|
do-daemonize: no
|
|
|
|
|
|
|
|
|
|
verbosity: 1
|
|
|
|
|
logfile: ""
|
|
|
|
|
log-time-ascii: yes
|
2021-10-27 13:47:17 +02:00
|
|
|
log-queries: no
|
|
|
|
|
log-replies: no
|
2021-09-28 12:11:58 +02:00
|
|
|
|
|
|
|
|
access-control: 172.16.0.0/16 allow
|
|
|
|
|
access-control: 10.200.200.0/24 allow
|
|
|
|
|
access-control: 172.17.0.0/16 allow
|
|
|
|
|
|
|
|
|
|
local-zone: "hottis.de." transparent
|
2021-10-27 13:47:17 +02:00
|
|
|
local-data: "home.hottis.de. IN A 172.16.10.41"
|
