408047628e
With growing interest, DNS over TLS can be setup in Unbounds foward-zone: clause. A broader UCI solution is added to support forward-, stub-, and auth- zone clauses in a new 'zone' section. This implentation required reworking scripts, because they did not scale. 'forward_domain' and 'prefetch_root' options are removed, and superceded by 'zone' section. Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
53 lines
1.3 KiB
Text
53 lines
1.3 KiB
Text
config unbound
|
|
option add_extra_dns '0'
|
|
option add_local_fqdn '1'
|
|
option add_wan_fqdn '0'
|
|
option dhcp_link 'none'
|
|
option dhcp4_slaac6 '0'
|
|
option dns64 '0'
|
|
option dns64_prefix '64:ff9b::/96'
|
|
option domain 'lan'
|
|
option domain_type 'static'
|
|
option edns_size '1280'
|
|
option extended_stats '0'
|
|
option hide_binddata '1'
|
|
option listen_port '53'
|
|
option localservice '1'
|
|
option manual_conf '0'
|
|
option protocol 'default'
|
|
option query_minimize '0'
|
|
option query_min_strict '0'
|
|
option rebind_localhost '0'
|
|
option rebind_protection '1'
|
|
option recursion 'default'
|
|
option resource 'default'
|
|
option root_age '9'
|
|
option ttl_min '120'
|
|
option unbound_control '0'
|
|
option validator '0'
|
|
option validator_ntp '1'
|
|
option verbosity '1'
|
|
list trigger_interface 'lan'
|
|
list trigger_interface 'wan'
|
|
#list domain_insecure 'ntp.example.com'
|
|
|
|
config zone
|
|
option enabled '0'
|
|
option fallback '1'
|
|
option url_dir 'https://www.internic.net/domain/'
|
|
option zone_type 'auth_zone'
|
|
list server 'lax.xfr.dns.icann.org'
|
|
list server 'iad.xfr.dns.icann.org'
|
|
list zone_name '.'
|
|
list zone_name 'arpa.'
|
|
list zone_name 'in-addr.arpa.'
|
|
list zone_name 'ip6.arpa.'
|
|
|
|
config zone
|
|
option enabled '0'
|
|
option fallback '1'
|
|
option resolv_conf '1'
|
|
option zone_type 'forward_zone'
|
|
list zone_name 'isp-bill.example.com.'
|
|
list zone_name 'isp-mail.example.net.'
|
|
|