ansible/roles/unbound/templates/unbound.conf.j2

56 lines
1.1 KiB
Django/Jinja

server:
verbosity: {{ unbound['verbosity'] | default(1) }}
{% for adr in unbound['interfaces'] %}
interface: {{ adr }}
{% endfor %}
{% for ac in unbound['access-control'] %}
# {{ ac['name'] }}
{% for addr in ac['addr'] %}
access-control: {{ addr }} {{ ac['policy'] }}
{% endfor %}
{% endfor %}
# reply on the same interface that the query came from
interface-automatic: yes
# chroot: "/etc/unbound"
# username: "unbound"
# directory: "/etc/unbound"
# the log file, "" means log to stderr.
# Use of this option sets use-syslog to "no".
# logfile: ""
use-syslog: yes
# Log identity to report. if empty, defaults to the name of argv[0]
# (usually "unbound").
# log-identity: ""
# print UTC timestamp in ascii to logfile, default is epoch in seconds.
# log-time-ascii: no
#log-queries: yes
#log-replies: yes
root-hints: "root.hints"
module-config: "validator iterator"
auto-trust-anchor-file: "/etc/unbound/root.key"
val-log-level: {{ unbound['val-log-level'] | default(2) }}
python:
# ...
dynlib:
# ...
# Remote control config section.
remote-control:
# ...