server:
	access-control: 0.0.0.0/0 deny
	access-control: 127.0.0.0/8 allow_snoop
	#access-control: ::0/0 refuse
	#access-control: ::1 allow
	#access-control: ::ffff:127.0.0.1 allow
	#add-holddown: 2592000 # 30 days
	auto-trust-anchor-file: "/var/lib/unbound/root.key"
	#cache-max-ttl: 86400
	#cache-min-ttl: 0
	chroot: ""
	#del-holddown: 2592000 # 30 days
	directory: "/etc/unbound"
	#dlv-anchor-file: "dlv.isc.org.key"
	#do-daemonize: yes
	do-ip4: yes
	do-ip6: no
	#do-not-query-address: 127.0.0.1/8
	#do-not-query-address: ::1
	#do-not-query-localhost: yes
	do-tcp: yes
	do-udp: yes
	#domain-insecure: ""
	#edns-buffer-size: 4096
	#extended-statistics: no
	#harden-dnssec-stripped: yes
	#harden-glue: yes
	#harden-large-queries: no
	#harden-referral-path: no
	#harden-short-bufsize: no
	hide-identity: yes
	hide-version: yes
	identity: ""
	#incoming-num-tcp: 10
	#infra-cache-lame-size: 10k
	infra-cache-numhosts: 10000
	#infra-cache-slabs: 4
	#infra-host-ttl: 900
	#infra-lame-ttl: 900
	#interface-automatic: no
	interface: 127.0.0.1
	#jostle-timeout: 200
	#keep-missing: 31622400 # 366 days
	#key-cache-size: 4m
	#key-cache-slabs: 4
	#log-time-ascii: no
	#logfile: ""
	module-config: "iterator"
	#msg-buffer-size: 65552
	msg-cache-size: 4m
	#msg-cache-slabs: 4
	#neg-cache-size: 1m
	#num-queries-per-thread: 1024
	#num-threads: 1
	outgoing-interface: OUTGOING_INTERFACE
	#outgoing-num-tcp: 10
	outgoing-port-avoid: "3200-3208"
	#outgoing-port-permit: 32768
	#outgoing-range: 4096
	#pidfile: "/run/unbound.pid"
	port: 53
	#prefetch-key: no
	#prefetch: no
	#private-address: 10.0.0.0/8
	#private-address: 172.16.0.0/12
	#private-address: 192.168.0.0/16
	#private-address: 192.254.0.0/16
	#private-address: fd00::/8
	#private-address: fe80::/10
	#private-domain: "example.com"
	root-hints: "named.cache"
	rrset-cache-size: 4m
	#rrset-cache-slabs: 4
	#so-rcvbuf: 0
	#statistics-cumulative: no
	#statistics-interval: 0
	#target-fetch-policy: "3 2 1 0 0"
	#trust-anchor-file: ""
	#trust-anchor: "jelte.nlnetlabs.nl. DS 42860 5 1 14D739EB566D2B1A5E216A0BA4D17FA9B038BE4A"
	#trust-anchor: "nlnetlabs.nl. DNSKEY 257 3 5 AQPzzTWMz8qSWIQlfRnPckx2BiVmkVN6LPupO3mbz7FhLSnm26n6iG9N Lby97Ji453aWZY3M5/xJBSOS2vWtco2t8C0+xeO1bc/d6ZTy32DHchpW 6rDH1vp86Ll+ha0tmwyy9QP7y2bVw5zSbFCrefk8qCUBgfHm9bHzMG1U BYtEIQ=="
	#trusted-keys-file: ""
	#unwanted-reply-threshold: 10000000
	#use-caps-for-id: no
	use-syslog: yes
	username: "unbound"
	val-bogus-ttl: 60
	#val-clean-additional: yes
	#val-log-level: 1
	#val-nsec3-keysize-iterations: "1024 150 2048 500 4096 2500"
	#val-override-date: ""
	#val-permissive-mode: no
	#val-sig-skew-max: 86400
	#val-sig-skew-min: 3600
	verbosity: 1
	version: ""
python:
	#python-script: "/etc/unbound/ubmodule-tst.py"
remote-control:
	control-cert-file: "/etc/unbound/unbound_control.pem"
	control-enable: yes
	control-interface: 127.0.0.1
	#control-interface: ::1
	control-key-file:  "/etc/unbound/unbound_control.key"
	control-port: 9953
	server-cert-file:  "/etc/unbound/unbound_server.pem"
	server-key-file:   "/etc/unbound/unbound_server.key"