Mikaela
/
shell-things
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

unbound: the mass file is not a good idea? cut it?

This commit is contained in:
Aminda Suomalainen 2020-08-16 12:18:07 +03:00
parent e4d18d47c5
commit b5cafdeb90
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723
2 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
etc/unbound/unbound.conf.d/dns-over-tls.conf
View File

@ -1,3 +1,5 @@
# I am not confident using so huge list is a good idea, thus dot-*.conf's
# NOTE! Requires Unbound 1.7.3 or newer! Debian 9 has 1.6.0
# Based on https://www.ctrl.blog/entry/unbound-tls-forwarding.html
#

13
etc/unbound/unbound.conf.d/dot-quad9.conf Normal file
View File

@ -0,0 +1,13 @@
server:
# Debian ca-certificates location
tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
# ctrl.blog says this is the Fedora location
#tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
forward-zone:
name: "."
forward-tls-upstream: yes
forward-addr: 2620:fe::fe@853#dns.quad9.net
forward-addr: 9.9.9.9@853#dns.quad9.net
forward-addr: 2620:fe::9@853#dns.quad9.net
forward-addr: 149.112.112.112@853#dns.quad9.net