server:
	#log-replies: yes
	interface: 0.0.0.0
	interface: ::0
	extended-statistics: yes
	rrset-roundrobin: yes
	root-hints: /usr/share/dns-root-hints/named.root
	trust-anchor-file: /usr/share/dnssec-root/trusted-key.key
	tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
	port: 53
	prefetch: yes
	prefetch-key: yes
	do-daemonize: yes
	pidfile: "/run/unbound.pid"
	minimal-responses: no
	logfile: ""
	cache-min-ttl: 60
	harden-glue: yes
	aggressive-nsec: yes
	serve-expired: yes
	serve-expired-ttl: 86400
	serve-expired-ttl-reset: yes