diff options
| author | Max Resnick <max@ofmax.li> | 2026-09-05 22:42:38 -0700 |
|---|---|---|
| committer | Max Resnick <max@ofmax.li> | 2026-09-05 22:42:38 -0700 |
| commit | 24a0e9c7dd9f32553984748c2c5e7d5530c20f27 (patch) | |
| tree | 32eae716244107bffa4cecd397b09f3b0c048e6e /src/unbound-adblock/etc | |
| parent | 6d8d1654aa327b21cbc927cc1692e2dc79f25597 (diff) | |
| download | grumpy-containers-24a0e9c7dd9f32553984748c2c5e7d5530c20f27.tar.gz | |
fix: resolve tls issue
Diffstat (limited to '')
| -rw-r--r-- | src/unbound-adblock/etc/ad-zones.conf (renamed from src/unbound-adblock/etc/zones/ad-zones.conf) | 0 | ||||
| -rw-r--r-- | src/unbound-adblock/etc/unbound.base.conf | 6 |
2 files changed, 4 insertions, 2 deletions
diff --git a/src/unbound-adblock/etc/zones/ad-zones.conf b/src/unbound-adblock/etc/ad-zones.conf index 66b7b54..66b7b54 100644 --- a/src/unbound-adblock/etc/zones/ad-zones.conf +++ b/src/unbound-adblock/etc/ad-zones.conf diff --git a/src/unbound-adblock/etc/unbound.base.conf b/src/unbound-adblock/etc/unbound.base.conf index c0f29a1..92c76db 100644 --- a/src/unbound-adblock/etc/unbound.base.conf +++ b/src/unbound-adblock/etc/unbound.base.conf @@ -1,5 +1,3 @@ -include: "/etc/unbound/unbound.conf.d/ad-zones.conf" - server: port: 5353 interface: 0.0.0.0 @@ -16,6 +14,10 @@ server: qname-minimisation: yes use-caps-for-id: yes + # Required for forward-tls-upstream: without a CA bundle unbound cannot + # verify the upstream auth-names and every DoT handshake fails -> SERVFAIL + tls-cert-bundle: "/etc/ssl/certs/ca-certificates.crt" + num-threads: 1 msg-cache-size: 16m rrset-cache-size: 32m |