36 lines
804 B
Django/Jinja
36 lines
804 B
Django/Jinja
|
|
server:
|
|
interface: 172.20.20.10@53
|
|
interface: 172.20.20.10@853
|
|
interface: 172.20.21.2@53
|
|
|
|
tls-service-key: {{ tls_private }}/dns.home.foo.sh.key
|
|
tls-service-pem: {{ tls_certs }}/dns.home.foo.sh.crt
|
|
tls-cert-bundle: {{ tls_bundle }}
|
|
|
|
access-control: 127.0.0.0/8 allow
|
|
access-control: ::1 allow
|
|
access-control: 172.20.20.0/22 allow
|
|
|
|
extended-statistics: yes
|
|
|
|
hide-identity: yes
|
|
hide-version: yes
|
|
|
|
prefetch: yes
|
|
unblock-lan-zones: yes
|
|
|
|
remote-control:
|
|
control-enable: yes
|
|
control-interface: /var/run/unbound.sock
|
|
|
|
forward-zone:
|
|
name: "."
|
|
forward-tls-upstream: yes
|
|
forward-addr: 8.8.8.8@853#dns.google
|
|
|
|
{% for zone in unbound_zones %}
|
|
auth-zone:
|
|
name: "{{ zone }}"
|
|
zonefile: "{{ unbound_zonedir }}/{{ zone }}"
|
|
{% endfor %}
|