# Unbound configuration file for Debian.
#
# See the unbound.conf(5) man page.
#
# See /usr/share/doc/unbound/objectbrokerss/unbound.conf for a commented
# reference config file.
#
# The following line includes additional configuration files from the
# /etc/unbound/unbound.conf.d directory.
    server:
    # location of the trust anchor file that enables DNSSEC
    auto-trust-anchor-file: "/root.key"
    # send minimal amount of information to upstream servers to enhance privacy
    qname-minimisation: yes
    prefetch: yes
    serve-expired: yes
    # the interface that is used to connect to the network (this will listen to all interfaces)
    interface: 0.0.0.0
    # interface: ::0
    private-address: 192.168.0.0/16
    private-address: 100.64.0.0/10

    # addresses from the IP range that are allowed to connect to the resolver
    access-control: 192.168.88.0/24 allow
    # explicitly allow localhost access
    access-control: 127.0.0.0/8 allow
    # allow Tailnet
    access-control: 100.64.0.0/10 allow
    # uncomment the following line to allow Tailnet IPv6
    # access-control: fd7a:115c:a1e0::/48 allow

    access-control-view: 192.168.88.0/24 lan
    access-control-view: 100.64.0.0/10 tailnet
    
    do-ip4: yes
    do-ip6: no
    do-udp: yes
    do-tcp: yes

    forward-zone:
      name: "ts.net."
      forward-addr: 100.100.100.100

    forward-zone:
      name: "100.in-addr.arpa."
      forward-addr: 100.100.100.100

view:
  name: "lan"
  view-first: yes
  local-zone: "objectbrokers.com." transparent
  local-data: "teal.objectbrokers.com. A 192.168.88.231"
  local-data: "nextcloud.objectbrokers.com. A 192.168.88.231"
  local-data: "photo.objectbrokers.com. A 192.168.88.231"
  local-data: "gitea.objectbrokers.com. A 192.168.88.231"
  local-data: "portainer.objectbrokers.com. A 192.168.88.231"
  local-data: "jellyfin.objectbrokers.com. A 192.168.88.231"
  local-data: "vaultwarden.objectbrokers.com. A 192.168.88.231"
  local-data: "BOSCH-B36CL80ENS-68A40EB2F3BB.objectbrokers.com. A 192.168.88.64“
  local-data: "bosch-dishwasher-014010536224152576.objectbrokers.com. A 192.168.88.13“
  local-data: "chromecast.objectbrokers.com. A 192.168.88.156“
  local-data: "cr1000b.objectbrokers.com. A 192.168.88.25“
  local-data: "cranberrypi.objectbrokers.com. A 192.168.88.40“
  local-data: "cygnus.objectbrokers.com. A 192.168.88.75“
  local-data: "Denon-AVR-X3800H.objectbrokers.com. A 192.168.88.209“
  local-data: "DESKTOP-V5OFVIA.objectbrokers.com. A 192.168.88.18“
  local-data: "EPSON0BAAB1.objectbrokers.com. A 192.168.88.15“
  local-data: "evan-s-S23.objectbrokers.com. A 192.168.88.29“
  local-data: "evansroom.objectbrokers.com. A 192.168.88.82“
  local-data: "hAPax3.objectbrokers.com. A 192.168.88.47“
  local-data: "iris-s-S23-ultra.objectbrokers.com. A 192.168.88.86“
  local-data: "lambdesktop.objectbrokers.com. A 192.168.88.187“
  local-data: "lambtop.objectbrokers.com. A 192.168.88.20“
  local-data: "LgwebOSTV.objectbrokers.com. A 192.168.88.14“
  local-data: "mallard.objectbrokers.com. A 192.168.88.87“
  local-data: "merganser.objectbrokers.com. A 192.168.88.26“
  local-data: "pixel-9a.objectbrokers.com. A 192.168.88.142“
  local-data: "rokuExpress4k.objectbrokers.com. A 192.168.88.178“
  local-data: "samsung-washer.objectbrokers.com. A 192.168.88.220“
  local-data: "tcl6.objectbrokers.com. A 192.168.88.23“

view:
  name: "tailnet"
  view-first: yes
  local-zone: "objectbrokers.com." transparent
  local-data: "teal.objectbrokers.com. A 100.81.165.11"
  local-data: "cygnus.objectbrokers.com. A 100.99.151.65"
  local-data: "nextcloud.objectbrokers.com. A 100.81.165.11"
  local-data: "photo.objectbrokers.com. A 100.81.165.11"
  local-data: "gitea.objectbrokers.com. A 100.81.165.11"
  local-data: "portainer.objectbrokers.com. A 100.81.165.11"
  local-data: "jellyfin.objectbrokers.com. A 100.81.165.11"
  local-data: "vaultwarden.objectbrokers.com. A 100.81.165.11"
  local-data: "lambtop.objectbrokers.com. A 100.69.184.48"
  local-data: "cranberrypi.objectbrokers.com. A 100.90.20.83"
  local-data: "fedora.objectbrokers.com. A 100.99.193.122"
  local-data: "lambdesktop.objectbrokers.com. A 100.95.22.24"
  local-data: "mallard.objectbrokers.com. A 1100.116.60.98"
  local-data: "merganser.objectbrokers.com. A 100.80.145.121"
  local-data: "pixel-9a.objectbrokers.com. A 1100.76.129.107"

remote-control:
  control-enable: yes
  control-interface: /run/unbound.ctl