diff options
| author | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
|---|---|---|
| committer | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
| commit | 83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch) | |
| tree | 19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/dns/etc-unbound/unbound.conf.d | |
| parent | 51d43498b07dc97d795947964534f0903cd05db5 (diff) | |
| download | bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip | |
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/dns/etc-unbound/unbound.conf.d')
5 files changed, 0 insertions, 45 deletions
diff --git a/straper/db/public/dns/etc-unbound/unbound.conf.d/10-hardening.conf b/straper/db/public/dns/etc-unbound/unbound.conf.d/10-hardening.conf deleted file mode 100644 index caf6213..0000000 --- a/straper/db/public/dns/etc-unbound/unbound.conf.d/10-hardening.conf +++ /dev/null @@ -1,7 +0,0 @@ -server: - prefetch: yes - harden-glue: yes - harden-dnssec-stripped: yes - qname-minimisation: yes - hide-identity: yes - hide-version: yes diff --git a/straper/db/public/dns/etc-unbound/unbound.conf.d/blocklist.conf b/straper/db/public/dns/etc-unbound/unbound.conf.d/blocklist.conf deleted file mode 100644 index fe529ba..0000000 --- a/straper/db/public/dns/etc-unbound/unbound.conf.d/blocklist.conf +++ /dev/null @@ -1,2 +0,0 @@ -server: -local-zone: "Not" always_nxdomain diff --git a/straper/db/public/dns/etc-unbound/unbound.conf.d/recursive.conf b/straper/db/public/dns/etc-unbound/unbound.conf.d/recursive.conf deleted file mode 100644 index cf87fc4..0000000 --- a/straper/db/public/dns/etc-unbound/unbound.conf.d/recursive.conf +++ /dev/null @@ -1,27 +0,0 @@ -server: - interface: 127.0.0.1 - port: 5353 - do-ip4: yes - do-ip6: yes - do-udp: yes - do-tcp: yes - - root-hints: "/var/lib/unbound/root.hints" - auto-trust-anchor-file: "/var/lib/unbound/root.key" - - hide-identity: yes - hide-version: yes - harden-glue: yes - harden-dnssec-stripped: yes - use-caps-for-id: yes - - cache-min-ttl: 3600 - cache-max-ttl: 86400 - - access-control: 127.0.0.1/8 allow - access-control: 192.168.33.0/24 allow - - # Fix DNSSEC + prefetch conflict - prefetch: yes - prefetch-key: yes - module-config: "validator iterator" diff --git a/straper/db/public/dns/etc-unbound/unbound.conf.d/remote-control.conf b/straper/db/public/dns/etc-unbound/unbound.conf.d/remote-control.conf deleted file mode 100644 index 6c18bd7..0000000 --- a/straper/db/public/dns/etc-unbound/unbound.conf.d/remote-control.conf +++ /dev/null @@ -1,5 +0,0 @@ -remote-control: - control-enable: yes - # by default the control interface is is 127.0.0.1 and ::1 and port 8953 - # it is possible to use a unix socket too - control-interface: /run/unbound.ctl diff --git a/straper/db/public/dns/etc-unbound/unbound.conf.d/root-auto-trust-anchor-file.conf.disabled b/straper/db/public/dns/etc-unbound/unbound.conf.d/root-auto-trust-anchor-file.conf.disabled deleted file mode 100644 index 433eff9..0000000 --- a/straper/db/public/dns/etc-unbound/unbound.conf.d/root-auto-trust-anchor-file.conf.disabled +++ /dev/null @@ -1,4 +0,0 @@ -server: - # The following line will configure unbound to perform cryptographic - # DNSSEC validation using the root trust anchor. - auto-trust-anchor-file: "/var/lib/unbound/root.key" |