---

# unbound server settings
unbound_verbosity: 1
unbound_port: 53
unbound_do_ip6: true
unbound_do_tcp: true
unbound_num_threads: 2
unbound_so_reuseport: true

# security
unbound_use_caps_for_id: true
unbound_qname_minimisation: true
unbound_harden_dnssec_stripped: true
unbound_harden_glue: true
unbound_hide_identity: true
unbound_hide_version: true

# cache
unbound_cache_min_ttl: 5
unbound_cache_max_ttl: 86400
unbound_prefetch: true

# unbound upstream info
unbound_upstream_dns:
  - "8.8.8.8"
  - "1.1.1.1"

# unbound allow access
unbound_allow_access:
  - name: "example-lan"
    network: "192.168.1.0/24"

# unbound zones
unbound_zones: []