feat: make defaults configurable

defaults/main.yaml

@@ -1,5 +1,26 @@
 ---
 
+# unbound server settings
+unbound_verbosity: 1
+unbound_port: 53
+unbound_do_ip6: true
+unbound_do_tcp: true
+unbound_num_threads: 2
+unbound_so_reuseport: true
+
+# security
+unbound_use_caps_for_id: true
+unbound_qname_minimisation: true
+unbound_harden_dnssec_stripped: true
+unbound_harden_glue: true
+unbound_hide_identity: true
+unbound_hide_version: true
+
+# cache
+unbound_cache_min_ttl: 5
+unbound_cache_max_ttl: 86400
+unbound_prefetch: true
+
 # unbound upstream info
 unbound_upstream_dns:
   - "8.8.8.8"
@@ -11,23 +32,4 @@ unbound_allow_access:
     network: "192.168.1.0/24"
 
 # unbound zones
-unbound_zones:
-
-  # example.internal
-  - zone: "example.internal"
-    type: "static"
-    records:
-
-      - name: "server.example.internal"
-        value: "192.168.1.0"
-
-      - name: "example.internal"
-        type: "TXT"
-        value: "v=spf1 include:example.internal ~all"
-
-      - name: "_sip._tcp.example.internal"
-        type: "SRV"
-        priority: 10
-        weight: 60
-        port: 5060
-        value: "server.example.internal"
+unbound_zones: []