deleting old unbound config under /etc/unbound

etc/unbound/unbound.conf.d/root-auto-trust-anchor-file.conf

@@ -1,4 +0,0 @@
-server:
-    # The following line will configure unbound to perform cryptographic
-    # DNSSEC validation using the root trust anchor.
-    auto-trust-anchor-file: "/var/lib/unbound/root.key"

etc/unbound/unbound.conf.d/zones.conf

@@ -1,3 +0,0 @@
-auth-zone:
-  name: objectbrokers.com
-  zonefile: /etc/unbound/zones/objectbrokers.zone

usr/local/etc/unbound/root.key

@@ -0,0 +1,10 @@
+; autotrust trust anchor file
+;;id: . 1
+;;last_queried: 1771250359 ;;Mon Feb 16 08:59:19 2026
+;;last_success: 1771250359 ;;Mon Feb 16 08:59:19 2026
+;;next_probe_time: 1771292919 ;;Mon Feb 16 20:48:39 2026
+;;query_failed: 0
+;;query_interval: 43200
+;;retry_time: 8640
+.	86400	IN	DNSKEY	257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} ;;state=2 [  VALID  ] ;;count=0 ;;lastchange=1771031738 ;;Fri Feb 13 20:15:38 2026
+.	86400	IN	DNSKEY	257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdpWWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwuMoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBevYtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ;{id = 38696 (ksk), size = 2048b} ;;state=2 [  VALID  ] ;;count=0 ;;lastchange=1771031738 ;;Fri Feb 13 20:15:38 2026

usr/local/etc/unbound/unbound.conf

@@ -2,16 +2,14 @@
 #
 # See the unbound.conf(5) man page.
 #
-# See /usr/share/doc/unbound/examples/unbound.conf for a commented
+# See /usr/share/doc/unbound/objectbrokerss/unbound.conf for a commented
 # reference config file.
 #
 # The following line includes additional configuration files from the
 # /etc/unbound/unbound.conf.d directory.
-include-toplevel: "/etc/unbound/unbound.conf.d/*.conf"
-
     server:
     # location of the trust anchor file that enables DNSSEC
-    # auto-trust-anchor-file: "/var/lib/unbound/root.key"
+    auto-trust-anchor-file: "/root.key"
     # send minimal amount of information to upstream servers to enhance privacy
     qname-minimisation: yes
     # the interface that is used to connect to the network (this will listen to all interfaces)
@@ -40,19 +38,25 @@ include-toplevel: "/etc/unbound/unbound.conf.d/*.conf"
 view:
   name: "lan"
   view-first: yes
-  local-zone: "example.com." transparent
-  local-data: "nextcloud.example.com. A 192.168.88.231"
-  local-data: "photo.example.com. A 192.168.88.231"
-  local-data: "gitea.example.com. A 192.168.88.231"
-  local-data: "portainer.example.com. A 192.168.88.231"
-  local-data: "vaultwarden.example.com. A 192.168.88.231"
+  local-zone: "objectbrokers.com." transparent
+  local-data: "nextcloud.objectbrokers.com. A 192.168.88.231"
+  local-data: "photo.objectbrokers.com. A 192.168.88.231"
+  local-data: "gitea.objectbrokers.com. A 192.168.88.231"
+  local-data: "portainer.objectbrokers.com. A 192.168.88.231"
+  local-data: "vaultwarden.objectbrokers.com. A 192.168.88.231"
 
 view:
   name: "tailnet"
   view-first: yes
-  local-zone: "example.com." transparent
-  local-data: "nextcloud.example.com. A 100.81.165.11"
-  local-data: "photo.example.com. A 100.81.165.11"
-  local-data: "gitea.example.com. A 100.81.165.11"
-  local-data: "portainer.example.com. A 100.81.165.11"
-  local-data: "vaultwarden.example.com. A 100.81.165.11"
+  local-zone: "objectbrokers.com." transparent
+  local-data: "nextcloud.objectbrokers.com. A 100.81.165.11"
+  local-data: "photo.objectbrokers.com. A 100.81.165.11"
+  local-data: "gitea.objectbrokers.com. A 100.81.165.11"
+  local-data: "portainer.objectbrokers.com. A 100.81.165.11"
+  local-data: "vaultwarden.objectbrokers.com. A 100.81.165.11"
+
+remote-control:
+  control-enable: yes
+  control-interface: /run/unbound.ctl
+
+