From 83f7fe4b8402bab171d110703a1b1115efbc9b28 Mon Sep 17 00:00:00 2001 From: Lukasz Kasprzak Date: Tue, 14 Apr 2026 22:32:43 +0200 Subject: cleaned up many scrits and deleted some that were of no use; renamed a lot --- .../etc-unbound/unbound.conf.d/10-hardening.conf | 7 ------ .../dns/etc-unbound/unbound.conf.d/blocklist.conf | 2 -- .../dns/etc-unbound/unbound.conf.d/recursive.conf | 27 ---------------------- .../etc-unbound/unbound.conf.d/remote-control.conf | 5 ---- .../root-auto-trust-anchor-file.conf.disabled | 4 ---- 5 files changed, 45 deletions(-) delete mode 100644 straper/db/public/dns/etc-unbound/unbound.conf.d/10-hardening.conf delete mode 100644 straper/db/public/dns/etc-unbound/unbound.conf.d/blocklist.conf delete mode 100644 straper/db/public/dns/etc-unbound/unbound.conf.d/recursive.conf delete mode 100644 straper/db/public/dns/etc-unbound/unbound.conf.d/remote-control.conf delete mode 100644 straper/db/public/dns/etc-unbound/unbound.conf.d/root-auto-trust-anchor-file.conf.disabled (limited to 'straper/db/public/dns/etc-unbound/unbound.conf.d') diff --git a/straper/db/public/dns/etc-unbound/unbound.conf.d/10-hardening.conf b/straper/db/public/dns/etc-unbound/unbound.conf.d/10-hardening.conf deleted file mode 100644 index caf6213..0000000 --- a/straper/db/public/dns/etc-unbound/unbound.conf.d/10-hardening.conf +++ /dev/null @@ -1,7 +0,0 @@ -server: - prefetch: yes - harden-glue: yes - harden-dnssec-stripped: yes - qname-minimisation: yes - hide-identity: yes - hide-version: yes diff --git a/straper/db/public/dns/etc-unbound/unbound.conf.d/blocklist.conf b/straper/db/public/dns/etc-unbound/unbound.conf.d/blocklist.conf deleted file mode 100644 index fe529ba..0000000 --- a/straper/db/public/dns/etc-unbound/unbound.conf.d/blocklist.conf +++ /dev/null @@ -1,2 +0,0 @@ -server: -local-zone: "Not" always_nxdomain diff --git a/straper/db/public/dns/etc-unbound/unbound.conf.d/recursive.conf b/straper/db/public/dns/etc-unbound/unbound.conf.d/recursive.conf deleted file mode 100644 index cf87fc4..0000000 --- a/straper/db/public/dns/etc-unbound/unbound.conf.d/recursive.conf +++ /dev/null @@ -1,27 +0,0 @@ -server: - interface: 127.0.0.1 - port: 5353 - do-ip4: yes - do-ip6: yes - do-udp: yes - do-tcp: yes - - root-hints: "/var/lib/unbound/root.hints" - auto-trust-anchor-file: "/var/lib/unbound/root.key" - - hide-identity: yes - hide-version: yes - harden-glue: yes - harden-dnssec-stripped: yes - use-caps-for-id: yes - - cache-min-ttl: 3600 - cache-max-ttl: 86400 - - access-control: 127.0.0.1/8 allow - access-control: 192.168.33.0/24 allow - - # Fix DNSSEC + prefetch conflict - prefetch: yes - prefetch-key: yes - module-config: "validator iterator" diff --git a/straper/db/public/dns/etc-unbound/unbound.conf.d/remote-control.conf b/straper/db/public/dns/etc-unbound/unbound.conf.d/remote-control.conf deleted file mode 100644 index 6c18bd7..0000000 --- a/straper/db/public/dns/etc-unbound/unbound.conf.d/remote-control.conf +++ /dev/null @@ -1,5 +0,0 @@ -remote-control: - control-enable: yes - # by default the control interface is is 127.0.0.1 and ::1 and port 8953 - # it is possible to use a unix socket too - control-interface: /run/unbound.ctl diff --git a/straper/db/public/dns/etc-unbound/unbound.conf.d/root-auto-trust-anchor-file.conf.disabled b/straper/db/public/dns/etc-unbound/unbound.conf.d/root-auto-trust-anchor-file.conf.disabled deleted file mode 100644 index 433eff9..0000000 --- a/straper/db/public/dns/etc-unbound/unbound.conf.d/root-auto-trust-anchor-file.conf.disabled +++ /dev/null @@ -1,4 +0,0 @@ -server: - # The following line will configure unbound to perform cryptographic - # DNSSEC validation using the root trust anchor. - auto-trust-anchor-file: "/var/lib/unbound/root.key" -- cgit v1.3