From d97dbb45fc499f0e7b42445c240acf5070262d43 Mon Sep 17 00:00:00 2001 From: Max Resnick Date: Sat, 19 Apr 2025 15:15:25 -0700 Subject: chore: rename unbound -> unbound-ads --- src/unbound-ads/etc/unbound.base.conf | 70 +++++++++++++++++++++++++++++++++++ 1 file changed, 70 insertions(+) create mode 100644 src/unbound-ads/etc/unbound.base.conf (limited to 'src/unbound-ads/etc/unbound.base.conf') diff --git a/src/unbound-ads/etc/unbound.base.conf b/src/unbound-ads/etc/unbound.base.conf new file mode 100644 index 0000000..f79b9c3 --- /dev/null +++ b/src/unbound-ads/etc/unbound.base.conf @@ -0,0 +1,70 @@ +# Don't allow unbound-control +remote-control: + control-enable: no + +server: + logfile: /dev/stdout + + # Refresh expiring cache entries, if less than 10% of their TTL remains + prefetch: yes + + # Serve stale data if not older than 1 day + serve-expired: yes + serve-expired-ttl: 86400 # one day, in seconds + + # Timeout request and serve stable data if it takes longer than 1.8 seconds + serve-expired-client-timeout: 1800 # 1.8 seconds, in milliseconds + + # Some logging to see what is going on + verbosity: 2 + log-queries: yes + + interface: 0.0.0.0 + # interface: ::0 + port: 5353 + + # Who can use our Unbound server + # access-control: 127.0.0.1/8 allow + # access-control: ::1/64 allow + # access-control: 192.168.0.1/16 allow + access-control: 10.42.0.0/16 allow + # access-control: 10.43.0.0/16 allow + do-ip4: yes + #do-ip6: yes + do-udp: yes + do-tcp: yes + + # Certificates + tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt + + + # private-domain: "bing.c-137.space" + + # Ad-blocking, leave this commented out for now... + #include: /etc/unbound/adservers.conf + + # Local zone entries should be transparent + local-zone: "lan.uctrl.net." transparent + local-zone: "168.192.in-addr.arpa." transparent + #include: /etc/unbound/host_entries.conf + +# Forward all queries to Quad9 and CloudFlare, with DNS over TLS +forward-zone: + name: "." + forward-tls-upstream: yes + + # Quad9 + #forward-addr: 2620:fe::fe@853#dns.quad9.net + forward-addr: 9.9.9.9@853#dns.quad9.net + #forward-addr: 2620:fe::9@853#dns.quad9.net + forward-addr: 149.112.112.112@853#dns.quad9.net + + # Cloudflare DNS + #forward-addr: 2606:4700:4700::1111@853#cloudflare-dns.com + forward-addr: 1.1.1.1@853#cloudflare-dns.com + #forward-addr: 2606:4700:4700::1001@853#cloudflare-dns.com + forward-addr: 1.0.0.1@853#cloudflare-dns.com + + # OpenDNS + forward-addr: 208.67.222.222 + forward-addr: 208.67.220.220 -- cgit v1.2.3