full-dns/templates/unbound.conf.j2

41 lines
863 B
Plaintext
Raw Normal View History

2020-08-03 19:25:51 +02:00
# handled by ansible
server:
verbosity: {{ dns_server.verbosity }}
do-not-query-localhost: no
directory: "/etc/unbound"
username: unbound
pidfile: "/run/unbound.pid"
{% if server.public_ip is defined %}
do-ip4: yes
interface: 0.0.0.0
2020-08-31 16:19:50 +02:00
access-control: 0.0.0.0/0 allow
{% else %}
do-ip4: no
{% endif -%}
{% if server.public_ip6 is defined %}
do-ip6: yes
interface: ::0
access-control: ::0/0 allow_snoop
{% else %}
do-ip6: no
{% endif -%}
2020-08-03 19:25:51 +02:00
{% if server.verbosity is defined -%}
verbosity: {{ server.verbosity }}
{% endif -%}
tls-win-cert: yes
2020-08-03 19:25:51 +02:00
{% for zone in zones -%}
auth-zone:
2020-08-03 19:25:51 +02:00
name: {{ zone.name }}.
master: {{ server.nsd_addr }}@{{ server.nsd_port }}
2020-08-03 19:25:51 +02:00
{% endfor %}
2020-11-04 01:11:31 +01:00
forward-zone:
name: "."
forward-host: dns.google#853
forward-tls-upstream: yes
# vim: set syntax=yaml et sw=0 ts=2 sts=0: