build/layer/router-base/unbound.conf

server:
	# allow only queries from local machine on port 5353
	interface: 127.0.0.1
	access-control: 127.0.0.0/8 allow
	port: 5353

	# See RFC 7816 "DNS Query Name Minimisation to Improve Privacy"
	qname-minimisation: yes

	# Root trust anchor key file for DNSSEC validation.
	auto-trust-anchor-file: "/etc/unbound/root.key"
	chroot: ""
Implement board/product config schema - build needs a pair of product and board name - some products can only be built for some boards - Config files in product/<name> directory override those in board/<name> - For some config files, like LDPATH or ROOTFS, the files are merged - product/common provides defaults Add default config for various services: - Add default config for unbound - Add default config for dnsmasq Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at> 2018-02-20 21:30:34 +01:00			`server:`
			`# allow only queries from local machine on port 5353`
			`interface: 127.0.0.1`
			`access-control: 127.0.0.0/8 allow`
			`port: 5353`

			`# See RFC 7816 "DNS Query Name Minimisation to Improve Privacy"`
			`qname-minimisation: yes`

			`# Root trust anchor key file for DNSSEC validation.`
Fix unbound directory setup - Move root.key into /etc/unbound directory - Remove pid file from config, it is baked into the configure options - Make sure unbound does not try to chroot anywhere Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at> 2018-06-04 16:25:47 +02:00			`auto-trust-anchor-file: "/etc/unbound/root.key"`
			`chroot: ""`