server:
  verbosity: 1
  statistics-interval: 0
  num-threads: 4
  chroot: ""
  interface: 0.0.0.0
  interface-automatic: yes
  access-control: 0.0.0.0/0 allow
  port: 53
  do-ip6: no
  so-reuseport: yes
  username: "unbound"
  directory: "/etc/unbound"
  logfile: ""
  log-time-ascii: no
  pidfile: "/var/run/unbound/unbound.pid"
  root-hints: "/etc/unbound/root.hints"
  hide-identity: yes
  hide-version: yes
  unwanted-reply-threshold: 10000000
  prefetch: yes
  prefetch-key: yes
  auto-trust-anchor-file: "/var/lib/unbound/root.key"
  val-log-level: 2
  module-config: "validator iterator"
  private-address: 10.0.0.0/8
  private-address: 172.16.0.0/12
  private-address: 192.168.0.0/16
{% for zone in unbound_forward_zones %}
{% if zone.name != '.' %}
  private-domain: "{{ zone.name }}"
  domain-insecure: "{{ zone.name }}"
{% endif %}
{% endfor %}
{% for zone in unbound_local_zones %}
  local-zone: "{{ zone.name }}{% if not zone.name is search('\.$') %}.{% endif %}" static
{% for entry in zone.entries | default([]) %}
  local-data: "{{ entry.name }}.{{ zone.name }}{% if not zone.name is search('\.$') %}.{% endif %} IN {{ entry.type }} {{ entry.value }}"
{% endfor %}
{% endfor %}

remote-control:
  control-enable: no

{% for zone in unbound_forward_zones %}
forward-zone:
  name: "{{ zone.name }}"
{% for forwarder in zone.forwarders %}
  forward-addr: {{ forwarder }}
{% endfor %}

{% endfor %}