Home | History | Annotate | Line # | Download | only in unbound 
      1 #	$NetBSD: unbound.conf,v 1.1 2026/07/01 03:56:27 riastradh Exp $
      2 #
      3 # This is a minimal unbound(8) configuration for `unbound=YES' in
      4 # /etc/rc.conf to enable a local recursive resolver on NetBSD,
      5 # listening on 127.0.0.1:53 and [::1]:53, controllable locally via
      6 # unbound-control(8).
      7 #
      8 # For other example configuration for other use cases, see
      9 # /usr/share/examples/unbound.
     10 #
     11 
     12 server:
     13 	# Maintain root DNSSEC anchors here, relative to the Unbound
     14 	# working directory (default /etc/unbound).
     15 	auto-trust-anchor-file: "root.key"
     16 
     17 	# Unbound daemon runs chrooted in this directory.  /etc/unbound
     18 	# will be set up as a symlink to
     19 	# /var/chroot/unbound/etc/unbound so editing
     20 	# /etc/unbound/unbound.conf still works.
     21 	chroot: "/var/chroot/unbound"
     22 
     23 	# Daemonize for running under rc(8).
     24 	do-daemonize: yes
     25 
     26 	# Write a pidfile to the canonical location for rc(8).
     27 	pidfile: "/var/run/unbound.pid"
     28 
     29 	# Use the system default UDP send buffer size.  We explicitly
     30 	# set this in order to suppress a confusing warning message at
     31 	# startup.
     32 	#
     33 	# PR bin/60325: unbound emits warning: so-sndbuf 4194304 was
     34 	# not granted
     35 	so-sndbuf: 0
     36 
     37 	# Once chrooted, run the Unbound daemon unprivileged as this
     38 	# user.
     39 	username: _unbound
     40 
     41 	# Send log messages to syslog.
     42 	use-syslog: yes
     43 
     44 remote-control:
     45 	# Enable local control with the unbound-control(8) command.
     46 	# Only root and users in the _unbound user's group will have
     47 	# access.
     48 	control-enable: yes
     49 	control-interface: /var/run/unbound.control
     50