diff --git a/etc/unbound/unbound.conf.d/dot-noads.conf b/etc/unbound/unbound.conf.d/dot-noads.conf new file mode 100644 index 00000000..c987d2cd --- /dev/null +++ b/etc/unbound/unbound.conf.d/dot-noads.conf @@ -0,0 +1,29 @@ +server: + # Debian ca-certificates location + #tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt + # Fedora + #tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem + # Use system certificates no matter where they are + tls-system-cert: yes + # Quad9 says pointless performance impact on forwarders. + # https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices/#disable-qname-minimization + qname-minimisation: no + +forward-zone: + name: "." + forward-tls-upstream: yes + # AdGuard with AdBlocking + forward-addr: 2a10:50c0::ad1:ff@853#dns.adguard.com + forward-addr: 94.140.14.14@853#dns.adguard.com + forward-addr: 2a10:50c0::ad2:ff@853#dns.adguard.com + forward-addr: 94.140.15.15@853#dns.adguard.com + # DNS4EU NoAds + forward-addr: 2a13:1001::86:54:11:213@853#noads.joindns4.eu + forward-addr: 2a13:1001::86:54:11:13@853#noads.joindns4.eu + forward-addr: 86.54.11.213@853#noads.joindns4.eu + forward-addr: 86.54.11.13@853#noads.joindns4.eu + # Mullvad Tracker, malware and adblocking + forward-addr: 194.242.2.4@853#base.dns.mullvad.net + forward-addr: 2a07:e340::4@853#base.dns.mullvad.net + +# vim: filetype=unbound.conf