server:
	interface: 127.0.0.1
	port: @PORT@
	use-syslog: no
	directory: .
	pidfile: "unbound.pid"
	chroot: ""
	username: ""
	do-not-query-localhost: no

	tls-cert-bundle: "unbound_server.pem"
	tls-upstream: yes

remote-control:
        control-enable: yes
        control-interface: 127.0.0.1
        control-port: @CONTROL_PORT@
        server-key-file: "unbound_server.key"
        server-cert-file: "unbound_server.pem"
        control-key-file: "unbound_control.key"
        control-cert-file: "unbound_control.pem"

forward-zone:
	name: "."
	forward-addr: "127.0.0.1@@TOPORT@#unbound"