# handled by ansible

server:
  verbosity: {{ dns_server.verbosity }}
  do-not-query-localhost: no
  directory: "/etc/unbound"
  username: unbound
  pidfile: "/run/unbound.pid"
  {% if server.verbosity is defined -%}
  verbosity: {{ server.verbosity }}
  {% endif -%}
  {% for addr in server.bind_addr|default(['0.0.0.0']) -%}
  interface: {{ addr }}
  {% endfor -%}
  {% for addr in server.access_control_allow|default([]) -%}
  access-control: {{ addr }} allow
  {% endfor -%}
  {% for addr in server.access_control_deny|default([]) -%}
  access-control: {{ addr }} deny
  {% endfor -%}

  {% for zone in zones -%}
  forward-zone:
    name: {{ zone.name }}.
    forward-addr: {{ server.nsd_addr }}@{{ server.nsd_port }}
  {% endfor %}