From fce3e9d1359783a3c56ed5f454f3708ee527c96d Mon Sep 17 00:00:00 2001 From: Aminda Suomalainen Date: Tue, 8 Jul 2025 09:05:36 +0300 Subject: [PATCH] unbound: add a dedicated dot-dns4eu.conf --- etc/unbound/unbound.conf.d/dot-dns4eu.conf | 44 ++++++++++++++++++++++ 1 file changed, 44 insertions(+) create mode 100644 etc/unbound/unbound.conf.d/dot-dns4eu.conf diff --git a/etc/unbound/unbound.conf.d/dot-dns4eu.conf b/etc/unbound/unbound.conf.d/dot-dns4eu.conf new file mode 100644 index 00000000..a7572378 --- /dev/null +++ b/etc/unbound/unbound.conf.d/dot-dns4eu.conf @@ -0,0 +1,44 @@ +# https://joindns4.eu - public DNS resolver primarily for European users from +# the European Union + +server: + # Debian ca-certificates location + #tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt + # Fedora + #tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem + # Use system certificates no matter where they are + tls-system-cert: yes + # Quad9 says pointless performance impact on forwarders. + # https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices/#disable-qname-minimization + qname-minimisation: no + +forward-zone: + name: "." + forward-tls-upstream: yes + # DNS4EU Unfiltered + #forward-addr: 2a13:1001::86:54:11:200@853#unfiltered.joindns4.eu + #forward-addr: 2a13:1001::86:54:11:100@853#unfiltered.joindns4.eu + #forward-addr: 86.54.11.200@853#unfiltered.joindns4.eu + #forward-addr: 86.54.11.100@853#unfiltered.joindns4.eu + # DNS4EU Protective + forward-addr: 2a13:1001::86:54:11:201@853#protective.joindns4.eu + forward-addr: 2a13:1001::86:54:11:1@853#protective.joindns4.eu + forward-addr: 86.54.11.201@853#protective.joindns4.eu + forward-addr: 86.54.11.1@853#protective.joindns4.eu + # DNS4EU Child Protection and Adblocking + #forward-addr: 2a13:1001::86:54:11:211@853#child-noads.joindns4.eu + #forward-addr: 2a13:1001::86:54:11:11@853#child-noads.joindns4.eu + #forward-addr: 86.54.11.211@853#child-noads.joindns4.eu + #forward-addr: 86.54.11.11@853#child-noads.joindns4.eu + # DNS4EU Child Protection + #forward-addr: 2a13:1001::86:54:11:212@853#child.joindns4.eu + #forward-addr: 2a13:1001::86:54:11:12@853#child.joindns4.eu + #forward-addr: 86.54.11.212@853#child.joindns4.eu + #forward-addr: 86.54.11.12@853#child.joindns4.eu + # DNS4EU Adblocking + #forward-addr: 2a13:1001::86:54:11:213@853#noads.joindns4.eu + #forward-addr: 2a13:1001::86:54:11:13@853#noads.joindns4.eu + #forward-addr: 86.54.11.213@853#noads.joindns4.eu + #forward-addr: 86.54.11.13@853#noads.joindns4.eu + +# vim: filetype=unbound.conf