auth-zone:
name: crxn
fallback-enabled: no
for-downstream: yes
for-upstream: yes
zonefile: "/etc/unbound/zones/crxn"