Home | History | Annotate | Line # | Download | only in unbound 
      1  1.1  riastrad #	$NetBSD: unbound.conf,v 1.1 2026/07/01 03:56:27 riastradh Exp $
      2  1.1  riastrad #
      3  1.1  riastrad # This is a minimal unbound(8) configuration for `unbound=YES' in
      4  1.1  riastrad # /etc/rc.conf to enable a local recursive resolver on NetBSD,
      5  1.1  riastrad # listening on 127.0.0.1:53 and [::1]:53, controllable locally via
      6  1.1  riastrad # unbound-control(8).
      7  1.1  riastrad #
      8  1.1  riastrad # For other example configuration for other use cases, see
      9  1.1  riastrad # /usr/share/examples/unbound.
     10  1.1  riastrad #
     11  1.1  riastrad 
     12  1.1  riastrad server:
     13  1.1  riastrad 	# Maintain root DNSSEC anchors here, relative to the Unbound
     14  1.1  riastrad 	# working directory (default /etc/unbound).
     15  1.1  riastrad 	auto-trust-anchor-file: "root.key"
     16  1.1  riastrad 
     17  1.1  riastrad 	# Unbound daemon runs chrooted in this directory.  /etc/unbound
     18  1.1  riastrad 	# will be set up as a symlink to
     19  1.1  riastrad 	# /var/chroot/unbound/etc/unbound so editing
     20  1.1  riastrad 	# /etc/unbound/unbound.conf still works.
     21  1.1  riastrad 	chroot: "/var/chroot/unbound"
     22  1.1  riastrad 
     23  1.1  riastrad 	# Daemonize for running under rc(8).
     24  1.1  riastrad 	do-daemonize: yes
     25  1.1  riastrad 
     26  1.1  riastrad 	# Write a pidfile to the canonical location for rc(8).
     27  1.1  riastrad 	pidfile: "/var/run/unbound.pid"
     28  1.1  riastrad 
     29  1.1  riastrad 	# Use the system default UDP send buffer size.  We explicitly
     30  1.1  riastrad 	# set this in order to suppress a confusing warning message at
     31  1.1  riastrad 	# startup.
     32  1.1  riastrad 	#
     33  1.1  riastrad 	# PR bin/60325: unbound emits warning: so-sndbuf 4194304 was
     34  1.1  riastrad 	# not granted
     35  1.1  riastrad 	so-sndbuf: 0
     36  1.1  riastrad 
     37  1.1  riastrad 	# Once chrooted, run the Unbound daemon unprivileged as this
     38  1.1  riastrad 	# user.
     39  1.1  riastrad 	username: _unbound
     40  1.1  riastrad 
     41  1.1  riastrad 	# Send log messages to syslog.
     42  1.1  riastrad 	use-syslog: yes
     43  1.1  riastrad 
     44  1.1  riastrad remote-control:
     45  1.1  riastrad 	# Enable local control with the unbound-control(8) command.
     46  1.1  riastrad 	# Only root and users in the _unbound user's group will have
     47  1.1  riastrad 	# access.
     48  1.1  riastrad 	control-enable: yes
     49  1.1  riastrad 	control-interface: /var/run/unbound.control
     50