full-dns/templates/unbound.conf.j2

27 lines
737 B
Django/Jinja

# handled by ansible
server:
verbosity: {{ dns_server.verbosity }}
do-not-query-localhost: no
directory: "/etc/unbound"
username: unbound
pidfile: "/run/unbound.pid"
{% if server.verbosity is defined -%}
verbosity: {{ server.verbosity }}
{% endif -%}
{% for addr in server.bind_addr|default(['0.0.0.0']) -%}
interface: {{ addr }}
{% endfor -%}
{% for addr in server.access_control_allow|default([]) -%}
access-control: {{ addr }} allow
{% endfor -%}
{% for addr in server.access_control_deny|default([]) -%}
access-control: {{ addr }} deny
{% endfor -%}
{% for zone in zones -%}
forward-zone:
name: {{ zone.name }}.
forward-addr: {{ server.nsd_addr }}@{{ server.nsd_port }}
{% endfor %}