diff options
Diffstat (limited to 'src/unbound-adblock/etc/unbound.base.conf')
| -rw-r--r-- | src/unbound-adblock/etc/unbound.base.conf | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/src/unbound-adblock/etc/unbound.base.conf b/src/unbound-adblock/etc/unbound.base.conf index c0f29a1..92c76db 100644 --- a/src/unbound-adblock/etc/unbound.base.conf +++ b/src/unbound-adblock/etc/unbound.base.conf @@ -1,5 +1,3 @@ -include: "/etc/unbound/unbound.conf.d/ad-zones.conf" - server: port: 5353 interface: 0.0.0.0 @@ -16,6 +14,10 @@ server: qname-minimisation: yes use-caps-for-id: yes + # Required for forward-tls-upstream: without a CA bundle unbound cannot + # verify the upstream auth-names and every DoT handshake fails -> SERVFAIL + tls-cert-bundle: "/etc/ssl/certs/ca-certificates.crt" + num-threads: 1 msg-cache-size: 16m rrset-cache-size: 32m |