dataset/seed/unbound/templates/risotto.conf

#RISOTTO: do not compare
server:
{% for interface in general.network.interfaces_list %}
    interface: {{ general.network['interface_' + interface|string]['ip_eth' + interface|string] }}
{% endfor %}
    do-ip4: yes
    do-ip6: no
    use-syslog: yes
{% for interface in general.network.interfaces_list %}
    access-control: {{ general.network['interface_' + interface|string]['ip_eth' + interface|string] }} allow
{% endfor %}
{% for authority in general.dns_resolver.forward_zones.unbound_forward_address %}
    access-control: {{ authority.unbound_allowed_client }} allow
{% endfor %}
    do-not-query-localhost: no
    auto-trust-anchor-file: "/srv/unbound/root.key"

remote-control:
    control-interface: 127.0.0.1

{% for authority in general.dns_resolver.forward_zones.unbound_forward_address %}
{% for zone in authority.unbound_forward_zones %}
stub-zone:
    name: "{{ zone }}"
    stub-addr: {{ authority.unbound_allowed_client }}

{% endfor %}
{% endfor %}
forward-zone:
    name: "."
{% for forward in general.dns_resolver.unbound_default_forwards %}
    forward-addr: {{ forward }}
{% endfor %}