rpz:
    name: "blocklist"
    zonefile: "/etc/unbound/blocklist.rpz"
    rpz-action-override: nxdomain
    rpz-log: no