aboutsummaryrefslogtreecommitdiff
path: root/src/unbound/etc/unbound.base.conf
diff options
context:
space:
mode:
authorMax Resnick <max@ofmax.li>2025-04-19 15:15:25 -0700
committerMax Resnick <max@ofmax.li>2025-04-19 15:15:25 -0700
commitd97dbb45fc499f0e7b42445c240acf5070262d43 (patch)
treeac8f07dc9429c13867b1eabe527ea56499ab03ae /src/unbound/etc/unbound.base.conf
parentc45ec331f469eb3f4165dbf3a77873c6f93d8f9d (diff)
downloadgrumpy-containers-d97dbb45fc499f0e7b42445c240acf5070262d43.tar.gz
chore: rename unbound -> unbound-ads
Diffstat (limited to 'src/unbound/etc/unbound.base.conf')
-rw-r--r--src/unbound/etc/unbound.base.conf70
1 files changed, 0 insertions, 70 deletions
diff --git a/src/unbound/etc/unbound.base.conf b/src/unbound/etc/unbound.base.conf
deleted file mode 100644
index f79b9c3..0000000
--- a/src/unbound/etc/unbound.base.conf
+++ /dev/null
@@ -1,70 +0,0 @@
-# Don't allow unbound-control
-remote-control:
- control-enable: no
-
-server:
- logfile: /dev/stdout
-
- # Refresh expiring cache entries, if less than 10% of their TTL remains
- prefetch: yes
-
- # Serve stale data if not older than 1 day
- serve-expired: yes
- serve-expired-ttl: 86400 # one day, in seconds
-
- # Timeout request and serve stable data if it takes longer than 1.8 seconds
- serve-expired-client-timeout: 1800 # 1.8 seconds, in milliseconds
-
- # Some logging to see what is going on
- verbosity: 2
- log-queries: yes
-
- interface: 0.0.0.0
- # interface: ::0
- port: 5353
-
- # Who can use our Unbound server
- # access-control: 127.0.0.1/8 allow
- # access-control: ::1/64 allow
- # access-control: 192.168.0.1/16 allow
- access-control: 10.42.0.0/16 allow
- # access-control: 10.43.0.0/16 allow
- do-ip4: yes
- #do-ip6: yes
- do-udp: yes
- do-tcp: yes
-
- # Certificates
- tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
-
-
- # private-domain: "bing.c-137.space"
-
- # Ad-blocking, leave this commented out for now...
- #include: /etc/unbound/adservers.conf
-
- # Local zone entries should be transparent
- local-zone: "lan.uctrl.net." transparent
- local-zone: "168.192.in-addr.arpa." transparent
- #include: /etc/unbound/host_entries.conf
-
-# Forward all queries to Quad9 and CloudFlare, with DNS over TLS
-forward-zone:
- name: "."
- forward-tls-upstream: yes
-
- # Quad9
- #forward-addr: 2620:fe::fe@853#dns.quad9.net
- forward-addr: 9.9.9.9@853#dns.quad9.net
- #forward-addr: 2620:fe::9@853#dns.quad9.net
- forward-addr: 149.112.112.112@853#dns.quad9.net
-
- # Cloudflare DNS
- #forward-addr: 2606:4700:4700::1111@853#cloudflare-dns.com
- forward-addr: 1.1.1.1@853#cloudflare-dns.com
- #forward-addr: 2606:4700:4700::1001@853#cloudflare-dns.com
- forward-addr: 1.0.0.1@853#cloudflare-dns.com
-
- # OpenDNS
- forward-addr: 208.67.222.222
- forward-addr: 208.67.220.220