From e6bd2b13adeb01c680e54eb162823bef80b7a412 Mon Sep 17 00:00:00 2001
From: Aminda Suomalainen <suomalainen+git@mikaela.info>
Date: Sat, 20 Apr 2024 20:25:48 +0300
Subject: [PATCH] unbound: add TREX upstream configuration

---
 etc/unbound/unbound.conf.d/.gitignore     | 1 +
 etc/unbound/unbound.conf.d/dot-quad9.conf | 4 ++++
 2 files changed, 5 insertions(+)
 create mode 100644 etc/unbound/unbound.conf.d/.gitignore

diff --git a/etc/unbound/unbound.conf.d/.gitignore b/etc/unbound/unbound.conf.d/.gitignore
new file mode 100644
index 00000000..71f81f42
--- /dev/null
+++ b/etc/unbound/unbound.conf.d/.gitignore
@@ -0,0 +1 @@
+dot-trex.conf
diff --git a/etc/unbound/unbound.conf.d/dot-quad9.conf b/etc/unbound/unbound.conf.d/dot-quad9.conf
index 944ce97d..9c11de5a 100644
--- a/etc/unbound/unbound.conf.d/dot-quad9.conf
+++ b/etc/unbound/unbound.conf.d/dot-quad9.conf
@@ -1,3 +1,7 @@
+# https://docs.quad9.net/services/
+# https://www.trex.fi/service/resolvers.html - says they don't provide
+# encryption, but host a Quad9 node and giving these addresses instead.
+
 server:
 	# Debian ca-certificates location
 	#tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt