Skip to content

Commit

Permalink
Chore(unbound): config
Browse files Browse the repository at this point in the history
- split config file
- turn off dnssec related
  • Loading branch information
till committed Mar 29, 2024
1 parent 1f4c5ee commit 77b0d06
Show file tree
Hide file tree
Showing 3 changed files with 45 additions and 40 deletions.
4 changes: 4 additions & 0 deletions .docker/unbound/rootfs/etc/unbound/forward-zone.conf
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
forward-zone:
name: "."
forward-addr: 9.9.9.9
forward-addr: 149.112.112.112
39 changes: 39 additions & 0 deletions .docker/unbound/rootfs/etc/unbound/server.conf
Original file line number Diff line number Diff line change
@@ -0,0 +1,39 @@
server:
username: ""
chroot: ""
port: 5353
verbosity: 1
interface: 0.0.0.0@5353
do-ip4: yes
do-ip6: no
do-udp: yes
do-tcp: no
prefer-ip4: yes
prefer-ip6: no
do-daemonize: no
access-control: 0.0.0.0/0 allow
logfile: ""
use-syslog: no
log-queries: yes
hide-identity: yes
hide-version: yes
harden-glue: yes
harden-dnssec-stripped: yes
use-caps-for-id: yes
cache-min-ttl: 3600
cache-max-ttl: 86400
prefetch: yes
num-threads: 4
msg-cache-slabs: 8
rrset-cache-slabs: 8
infra-cache-slabs: 8
key-cache-slabs: 8
rrset-cache-size: 256m
msg-cache-size: 128m
so-rcvbuf: 1m
private-address: 192.168.1.0/16
unwanted-reply-threshold: 10000
do-not-query-localhost: no
val-clean-additional: yes
val-permissive-mode: yes
module-config: "iterator"
42 changes: 2 additions & 40 deletions .docker/unbound/rootfs/etc/unbound/unbound.conf
Original file line number Diff line number Diff line change
@@ -1,41 +1,3 @@
server:
username: unbound
port: 5353
verbosity: 1
interface: 0.0.0.0@5353
do-ip4: yes
do-ip6: no
do-udp: yes
do-tcp: no
prefer-ip4: yes
prefer-ip6: no
do-daemonize: no
access-control: 0.0.0.0/0 allow
logfile: ""
use-syslog: no
log-queries: yes
hide-identity: yes
hide-version: yes
harden-glue: yes
harden-dnssec-stripped: yes
use-caps-for-id: yes
cache-min-ttl: 3600
cache-max-ttl: 86400
prefetch: yes
num-threads: 4
msg-cache-slabs: 8
rrset-cache-slabs: 8
infra-cache-slabs: 8
key-cache-slabs: 8
rrset-cache-size: 256m
msg-cache-size: 128m
so-rcvbuf: 1m
private-address: 192.168.1.0/16
unwanted-reply-threshold: 10000
do-not-query-localhost: no
val-clean-additional: yes
include: "/etc/unbound/server.conf"
root-hints: "/etc/unbound/root.hints"
forward-zone:
name: "."
forward-addr: 9.9.9.9
forward-addr: 149.112.112.112
include: "/etc/unbound/forward-zone.conf"

0 comments on commit 77b0d06

Please sign in to comment.