build/layer/router-base/unbound.conf

13 lines
337 B
Plaintext

server:
# allow only queries from local machine on port 5353
interface: 127.0.0.1
access-control: 127.0.0.0/8 allow
port: 5353
# See RFC 7816 "DNS Query Name Minimisation to Improve Privacy"
qname-minimisation: yes
# Root trust anchor key file for DNSSEC validation.
auto-trust-anchor-file: "/etc/unbound/root.key"
chroot: ""