Untitled

server:
    # Listen on all interfaces
    interface: 0.0.0.0
    port: 5335
    do-ip4: yes
    do-ip6: yes
    do-udp: yes
    do-tcp: yes

    # Use this machine as a local resolver
    access-control: 127.0.0.1/32 allow
    access-control: 192.168.0.0/16 allow
    
    # Privacy settings
    hide-identity: yes
    hide-version: yes
    
    # DNSSEC
    harden-glue: yes
    harden-dnssec-stripped: yes
    auto-trust-anchor-file: "/var/lib/unbound/root.key"
    
    # Performance
    num-threads: 2
    msg-cache-slabs: 8
    rrset-cache-slabs: 8
    infra-cache-slabs: 8
    key-cache-slabs: 8
    
    rrset-cache-size: 256m
    msg-cache-size: 128m
    
    # Minimize request data sent
    qname-minimisation: yes
    
    # Root hints
    root-hints: "/var/lib/unbound/root.hints"