27 lines
737 B
Plaintext
27 lines
737 B
Plaintext
|
# handled by ansible
|
||
|
|
||
|
server:
|
||
|
verbosity: {{ dns_server.verbosity }}
|
||
|
do-not-query-localhost: no
|
||
|
directory: "/etc/unbound"
|
||
|
username: unbound
|
||
|
pidfile: "/run/unbound.pid"
|
||
|
{% if server.verbosity is defined -%}
|
||
|
verbosity: {{ server.verbosity }}
|
||
|
{% endif -%}
|
||
|
{% for addr in server.bind_addr|default(['0.0.0.0']) -%}
|
||
|
interface: {{ addr }}
|
||
|
{% endfor -%}
|
||
|
{% for addr in server.access_control_allow|default([]) -%}
|
||
|
access-control: {{ addr }} allow
|
||
|
{% endfor -%}
|
||
|
{% for addr in server.access_control_deny|default([]) -%}
|
||
|
access-control: {{ addr }} deny
|
||
|
{% endfor -%}
|
||
|
|
||
|
{% for zone in zones -%}
|
||
|
forward-zone:
|
||
|
name: {{ zone.name }}.
|
||
|
forward-addr: {{ server.nsd_addr }}@{{ server.nsd_port }}
|
||
|
{% endfor %}
|