34 lines
1.1 KiB
Text
34 lines
1.1 KiB
Text
#RISOTTO: do not compare
|
|
server:
|
|
{% for interface in general.network.interfaces_list %}
|
|
interface: {{ general.network['interface_' + interface|string]['ip_eth' + interface|string] }}
|
|
{% endfor %}
|
|
do-ip4: yes
|
|
do-ip6: no
|
|
use-syslog: yes
|
|
{% for interface in general.network.interfaces_list %}
|
|
access-control: {{ general.network['interface_' + interface|string]['ip_eth' + interface|string] }} allow
|
|
{% endfor %}
|
|
{% for authority in general.dns_resolver.forward_zones.unbound_forward_address %}
|
|
access-control: {{ authority.unbound_allowed_client }} allow
|
|
{% endfor %}
|
|
do-not-query-localhost: no
|
|
auto-trust-anchor-file: "/srv/unbound/root.key"
|
|
|
|
remote-control:
|
|
control-interface: 127.0.0.1
|
|
|
|
{% for authority in general.dns_resolver.forward_zones.unbound_forward_address %}
|
|
{% for zone in authority.unbound_forward_zones %}
|
|
forward-zone:
|
|
name: "{{ zone }}"
|
|
forward-addr: {{ authority.unbound_allowed_client }}
|
|
|
|
{% endfor %}
|
|
{% endfor %}
|
|
forward-zone:
|
|
name: "."
|
|
{% for forward in general.dns_resolver.unbound_default_forwards %}
|
|
forward-addr: {{ forward }}
|
|
{% endfor %}
|
|
# forward-first: no
|