34 lines
1.4 KiB
YAML
34 lines
1.4 KiB
YAML
---
|
|
unbound_config_base_path: /etc/unbound
|
|
unbound_config_path: "{{ unbound_config_base_path }}/unbound.conf"
|
|
unbound_root_hints_path: "{{ unbound_config_base_path }}/root.hints"
|
|
unbound_anchor_root_key: "{{ unbound_config_base_path }}/root.key"
|
|
unbound_ad_servers_config_path: "{{ unbound_config_base_path }}/ad_servers.conf"
|
|
unbound_custom_lan_config_path: "{{ unbound_config_base_path }}/lan.conf"
|
|
unbound_custom_vpn_config_path: "{{ unbound_config_base_path }}/vpn.conf"
|
|
unbound_custom_lan_domain: "example.lan"
|
|
unbound_port: 53
|
|
unbound_apparmor_profile_path: /etc/apparmor.d/usr.sbin.unbound
|
|
|
|
unbound_interfaces:
|
|
- { address: "192.168.1.1", comment: "lan" }
|
|
- { address: "192.168.27.1", comment: "vpn" }
|
|
|
|
unbound_access_control:
|
|
- { subnet: "192.168.1.0/24", action: "allow", view: "lan", comment: "lan" }
|
|
- { subnet: "192.168.27.0/27", action: "allow", view: "vpn", comment: "vpn" }
|
|
|
|
unbound_firewall_allowed_sources:
|
|
- { src: "192.168.1.0/24", comment: "DNS from LAN" }
|
|
- { src: "192.168.27.0/27", comment: "DNS from VPN" }
|
|
|
|
unbound_custom_lan_records:
|
|
"example.lan":
|
|
v4: 192.168.1.2
|
|
|
|
# Prometheus exporter (optional, via prometheus-unbound-exporter).
|
|
# Scrapes unbound-control stats_noreset over the local control interface.
|
|
# Arch Linux only — the exporter is not packaged in Debian/Ubuntu.
|
|
unbound_exporter_enabled: false
|
|
unbound_exporter_listen_address: "127.0.0.1:9167"
|