From bd2e806aa1e485e95d46a3f6a8ca450990173111 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20D=C3=A9siles?=
 <1536672+cdesiles@users.noreply.github.com>
Date: Mon, 15 Dec 2025 22:13:01 +0100
Subject: [PATCH] fix: warning on unbound runs

---
 roles/unbound/tasks/main.yml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/roles/unbound/tasks/main.yml b/roles/unbound/tasks/main.yml
index cb97a56..150881c 100644
--- a/roles/unbound/tasks/main.yml
+++ b/roles/unbound/tasks/main.yml
@@ -119,6 +119,24 @@
     mode: "0640"
     state: file
 
+- name: Create /etc/default/unbound for DAEMON_OPTS
+  ansible.builtin.copy:
+    dest: /etc/default/unbound
+    content: |
+      # Unbound daemon options
+      DAEMON_OPTS=""
+    owner: root
+    group: root
+    mode: "0644"
+
+- name: Configure sysctl for unbound socket buffers
+  ansible.posix.sysctl:
+    name: net.core.rmem_max
+    value: "1048576"
+    state: present
+    sysctl_set: true
+    reload: true
+
 - name: Install unbound config
   ansible.builtin.template:
     src: "{{ item.src }}"