mirror of
https://github.com/pygos/build.git
synced 2024-11-16 00:17:11 +01:00
8c76110586
- Move root.key into /etc/unbound directory - Remove pid file from config, it is baked into the configure options - Make sure unbound does not try to chroot anywhere Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
12 lines
337 B
Text
12 lines
337 B
Text
server:
|
|
# allow only queries from local machine on port 5353
|
|
interface: 127.0.0.1
|
|
access-control: 127.0.0.0/8 allow
|
|
port: 5353
|
|
|
|
# See RFC 7816 "DNS Query Name Minimisation to Improve Privacy"
|
|
qname-minimisation: yes
|
|
|
|
# Root trust anchor key file for DNSSEC validation.
|
|
auto-trust-anchor-file: "/etc/unbound/root.key"
|
|
chroot: ""
|