Add Unbound as better DNSSEC enabled resolver

2017-06-12 23:48:27 +02:00
parent db01b08926
commit b367ec0ace
4 changed files with 119 additions and 12 deletions
@@ -0,0 +1,28 @@
+server:
+	verbosity: 2
+	interface: 0.0.0.0
+	interface: ::0
+	logfile: /dev/stdout
+	do-ip4: yes
+	do-ip6: yes
+	do-udp: yes
+	do-tcp: yes
+	do-daemonize: no
+	access-control: 172.22.1.0/24 allow
+	access-control: fd4d:6169:6c63:6f77::/64 allow
+	directory: "/etc/unbound"
+	username: unbound
+	auto-trust-anchor-file: trusted-key.key
+	private-address: 10.0.0.0/8
+	private-address: 172.16.0.0/12
+	private-address: 192.168.0.0/16
+	private-address: 169.254.0.0/16
+	private-address: fd00::/8
+	private-address: fe80::/10
+	root-hints: "/etc/unbound/root.hints"
+remote-control:
+	control-enable: yes
+	server-key-file: /etc/unbound/unbound_server.key
+	server-cert-file: /etc/unbound/unbound_server.pem
+	control-key-file: /etc/unbound/unbound_control.key
+	control-cert-file: /etc/unbound/unbound_control.pem