# This is another Debian default, that I may be missing under Arch, even
# if the location changes.
server:
	# The following line will configure unbound to perform cryptographic
	# DNSSEC validation using the root trust anchor.
	auto-trust-anchor-file: "/var/lib/unbound/root.key"

# vim: filetype=unbound.conf