=====================
Unbound Configuration
=====================

Configuration Locations
=======================

Unbound knows the following configurations locations:

* **System:** ``/etc/unbound/unbound.conf``


* **System:** ``/etc/unbound/unbound.conf.d/*``


Local Resolver (without DNSSEC)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

.. code-block:: bash
   
   # /etc/unbound/unbound.conf.d/server.conf
   
   server:
   	verbosity: 1
   	num-threads: 2
   	interface: 127.0.0.1
   	do-daemonize: yes
   	access-control: 127.0.0.1/8 allow
   	logfile: /var/log/unbound.log
   	log-time-ascii: yes
   	log-queries: no
   	hide-identity: yes
   	hide-version: yes
   
   	module-config: "iterator"
   
   # *.noc.bfh.ch is intern only
   stub-zone:
   	name: noc.bfh.ch
   	stub-addr: 147.87.224.20
   	stub-addr: 147.87.96.20

Local Resolver (with DNSSEC)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

.. code-block:: bash

   # /etc/unbound/unbound.conf.d/server.conf

   server:
   	verbosity: 1
   	num-threads: 2
   	interface: 127.0.0.1
   	do-daemonize: yes
   	access-control: 127.0.0.1/8 allow
   	logfile: /var/log/unbound.log
   	log-time-ascii: yes
   	log-queries: no
   	hide-identity: yes
   	hide-version: yes

   	module-config: "validator iterator"

   # *.noc.bfh.ch is intern only
   stub-zone:
   	name: noc.bfh.ch
   	stub-addr: 147.87.224.20
   	stub-addr: 147.87.96.20