jokester/ansible-playbooks
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: BREAKING unbound configuration

Browse Source
This commit is contained in:
Clément Désiles
2026-03-17 23:08:44 +01:00
parent 869727d364
commit e209a93a78
3 changed files with 26 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/unbound/templates/unbound.conf.j2
+11 -6
View File
@@ -14,20 +14,25 @@ server:
# Define interface binds by IP address
interface: 127.0.0.1 # lo (IPv4)
interface: ::1 # lo (IPv6)
interface: {{ unbound_interface_lan }} # lan0
interface: {{ unbound_interface_vpn }} # wg0
{% for iface in unbound_interfaces %}
interface: {{ iface.address }} # {{ iface.comment | default('') }}
{% endfor %}
# Define access controls (note that ufw might be also configured)
access-control: 0.0.0.0/0 refuse
access-control: 127.0.0.0/8 allow # lo interface
access-control: 192.168.1.0/24 allow # lan0 interface
access-control: 192.168.27.0/27 allow # wg0 interface
{% for acl in unbound_access_control %}
access-control: {{ acl.subnet }} {{ acl.action }} # {{ acl.comment | default('') }}
{% endfor %}
access-control: ::0/0 refuse
access-control: ::1 allow
# Specify custom local answers for each interface by using views:
access-control-view: 192.168.1.0/24 lan
access-control-view: 192.168.27.0/27 vpn
{% for acl in unbound_access_control %}
{% if acl.view is defined %}
access-control-view: {{ acl.subnet }} {{ acl.view }}
{% endif %}
{% endfor %}
do-ip4: yes
do-udp: yes