From 3b9acff361d85111ab84fb2273893cd035dfb367 Mon Sep 17 00:00:00 2001
From: Mikaela Suomalainen <mikaela+git@mikaela.info>
Date: Mon, 22 Jul 2019 15:14:11 +0300
Subject: [PATCH] etc/unbound add unbound.conf & unbound-control.conf

copy-pastes from Debian & Arch Wiki, however unbound-control in status
no as I guess it can be a hole most of time.
---
 etc/unbound/unbound.conf                      |  2 ++
 .../unbound.conf.d/unbound-control.conf       | 25 +++++++++++++++++++
 2 files changed, 27 insertions(+)
 create mode 100644 etc/unbound/unbound.conf
 create mode 100644 etc/unbound/unbound.conf.d/unbound-control.conf

diff --git a/etc/unbound/unbound.conf b/etc/unbound/unbound.conf
new file mode 100644
index 00000000..9722b44e
--- /dev/null
+++ b/etc/unbound/unbound.conf
@@ -0,0 +1,2 @@
+# This is just Debian default file which I expect
+include: "/etc/unbound/unbound.conf.d/*.conf"
diff --git a/etc/unbound/unbound.conf.d/unbound-control.conf b/etc/unbound/unbound.conf.d/unbound-control.conf
new file mode 100644
index 00000000..9b336e36
--- /dev/null
+++ b/etc/unbound/unbound.conf.d/unbound-control.conf
@@ -0,0 +1,25 @@
+# https://wiki.archlinux.org/index.php/Unbound#Setting_up_unbound-control
+
+remote-control:
+# Enable remote control with unbound-control(8) here.
+# set up the keys and certificates with unbound-control-setup.
+control-enable: no
+
+# what interfaces are listened to for remote control.
+# give 0.0.0.0 and ::0 to listen to all interfaces.
+control-interface: 127.0.0.1
+
+# port number for remote control operations.
+control-port: 8953
+
+# unbound server key file.
+server-key-file: "/etc/unbound/unbound_server.key"
+
+# unbound server certificate file.
+server-cert-file: "/etc/unbound/unbound_server.pem"
+
+# unbound-control key file.
+control-key-file: "/etc/unbound/unbound_control.key"
+
+# unbound-control certificate file.
+control-cert-file: "/etc/unbound/unbound_control.pem"