aports/config/unbound/base.conf

23 lines
537 B
Plaintext

server:
#log-replies: yes
interface: 0.0.0.0
interface: ::0
extended-statistics: yes
rrset-roundrobin: yes
root-hints: /usr/share/dns-root-hints/named.root
trust-anchor-file: /usr/share/dnssec-root/trusted-key.key
tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
port: 53
prefetch: yes
prefetch-key: yes
do-daemonize: yes
pidfile: "/run/unbound.pid"
minimal-responses: no
logfile: ""
cache-min-ttl: 60
harden-glue: yes
aggressive-nsec: yes
serve-expired: yes
serve-expired-ttl: 86400
serve-expired-ttl-reset: yes