107 lines
4.4 KiB
Plaintext
107 lines
4.4 KiB
Plaintext
# Unbound configuration file for Debian.
|
|
#
|
|
# See the unbound.conf(5) man page.
|
|
#
|
|
# See /usr/share/doc/unbound/objectbrokerss/unbound.conf for a commented
|
|
# reference config file.
|
|
#
|
|
# The following line includes additional configuration files from the
|
|
# /etc/unbound/unbound.conf.d directory.
|
|
server:
|
|
# location of the trust anchor file that enables DNSSEC
|
|
auto-trust-anchor-file: "/root.key"
|
|
# send minimal amount of information to upstream servers to enhance privacy
|
|
qname-minimisation: yes
|
|
prefetch: yes
|
|
serve-expired: yes
|
|
# the interface that is used to connect to the network (this will listen to all interfaces)
|
|
interface: 0.0.0.0
|
|
# interface: ::0
|
|
private-address: 192.168.0.0/16
|
|
private-address: 100.64.0.0/10
|
|
|
|
# addresses from the IP range that are allowed to connect to the resolver
|
|
access-control: 192.168.88.0/24 allow
|
|
# explicitly allow localhost access
|
|
access-control: 127.0.0.0/8 allow
|
|
# allow Tailnet
|
|
access-control: 100.64.0.0/10 allow
|
|
# uncomment the following line to allow Tailnet IPv6
|
|
# access-control: fd7a:115c:a1e0::/48 allow
|
|
|
|
access-control-view: 192.168.88.0/24 lan
|
|
access-control-view: 100.64.0.0/10 tailnet
|
|
|
|
do-ip4: yes
|
|
do-ip6: no
|
|
do-udp: yes
|
|
do-tcp: yes
|
|
|
|
forward-zone:
|
|
name: "ts.net."
|
|
forward-addr: 100.100.100.100
|
|
|
|
forward-zone:
|
|
name: "100.in-addr.arpa."
|
|
forward-addr: 100.100.100.100
|
|
|
|
view:
|
|
name: "lan"
|
|
view-first: yes
|
|
local-zone: "objectbrokers.com." transparent
|
|
local-data: "teal.objectbrokers.com. A 192.168.88.231"
|
|
local-data: "nextcloud.objectbrokers.com. A 192.168.88.231"
|
|
local-data: "photo.objectbrokers.com. A 192.168.88.231"
|
|
local-data: "gitea.objectbrokers.com. A 192.168.88.231"
|
|
local-data: "portainer.objectbrokers.com. A 192.168.88.231"
|
|
local-data: "jellyfin.objectbrokers.com. A 192.168.88.231"
|
|
local-data: "vaultwarden.objectbrokers.com. A 192.168.88.231"
|
|
local-data: "BOSCH-B36CL80ENS-68A40EB2F3BB.objectbrokers.com. A 192.168.88.64“
|
|
local-data: "bosch-dishwasher-014010536224152576.objectbrokers.com. A 192.168.88.13“
|
|
local-data: "chromecast.objectbrokers.com. A 192.168.88.156“
|
|
local-data: "cr1000b.objectbrokers.com. A 192.168.88.25“
|
|
local-data: "cranberrypi.objectbrokers.com. A 192.168.88.40“
|
|
local-data: "cygnus.objectbrokers.com. A 192.168.88.75“
|
|
local-data: "Denon-AVR-X3800H.objectbrokers.com. A 192.168.88.209“
|
|
local-data: "DESKTOP-V5OFVIA.objectbrokers.com. A 192.168.88.18“
|
|
local-data: "EPSON0BAAB1.objectbrokers.com. A 192.168.88.15“
|
|
local-data: "evan-s-S23.objectbrokers.com. A 192.168.88.29“
|
|
local-data: "evansroom.objectbrokers.com. A 192.168.88.82“
|
|
local-data: "hAPax3.objectbrokers.com. A 192.168.88.47“
|
|
local-data: "iris-s-S23-ultra.objectbrokers.com. A 192.168.88.86“
|
|
local-data: "lambdesktop.objectbrokers.com. A 192.168.88.187“
|
|
local-data: "lambtop.objectbrokers.com. A 192.168.88.20“
|
|
local-data: "LgwebOSTV.objectbrokers.com. A 192.168.88.14“
|
|
local-data: "mallard.objectbrokers.com. A 192.168.88.87“
|
|
local-data: "merganser.objectbrokers.com. A 192.168.88.26“
|
|
local-data: "pixel-9a.objectbrokers.com. A 192.168.88.142“
|
|
local-data: "rokuExpress4k.objectbrokers.com. A 192.168.88.178“
|
|
local-data: "samsung-washer.objectbrokers.com. A 192.168.88.220“
|
|
local-data: "tcl6.objectbrokers.com. A 192.168.88.23“
|
|
|
|
view:
|
|
name: "tailnet"
|
|
view-first: yes
|
|
local-zone: "objectbrokers.com." transparent
|
|
local-data: "teal.objectbrokers.com. A 100.81.165.11"
|
|
local-data: "cygnus.objectbrokers.com. A 100.99.151.65"
|
|
local-data: "nextcloud.objectbrokers.com. A 100.81.165.11"
|
|
local-data: "photo.objectbrokers.com. A 100.81.165.11"
|
|
local-data: "gitea.objectbrokers.com. A 100.81.165.11"
|
|
local-data: "portainer.objectbrokers.com. A 100.81.165.11"
|
|
local-data: "jellyfin.objectbrokers.com. A 100.81.165.11"
|
|
local-data: "vaultwarden.objectbrokers.com. A 100.81.165.11"
|
|
local-data: "lambtop.objectbrokers.com. A 100.69.184.48"
|
|
local-data: "cranberrypi.objectbrokers.com. A 100.90.20.83"
|
|
local-data: "fedora.objectbrokers.com. A 100.99.193.122"
|
|
local-data: "lambdesktop.objectbrokers.com. A 100.95.22.24"
|
|
local-data: "mallard.objectbrokers.com. A 1100.116.60.98"
|
|
local-data: "merganser.objectbrokers.com. A 100.80.145.121"
|
|
local-data: "pixel-9a.objectbrokers.com. A 1100.76.129.107"
|
|
|
|
remote-control:
|
|
control-enable: yes
|
|
control-interface: /run/unbound.ctl
|
|
|
|
|