# Unbound configuration file for Debian.
#
# See the unbound.conf(5) man page.
#
# See /usr/share/doc/unbound/examples/unbound.conf for a commented
# reference config file.
#
# The following line includes additional configuration files from the
# /etc/unbound/unbound.conf.d directory.
## me ### include: "/etc/unbound/unbound.conf.d/*.conf"

server:
  #auto-trust-anchor-file: "/var/lib/unbound/root.key"  # seems like my dnscrypt server do no support DNSSEC, so I can't enable this
  #interface: 0.0.0.0

  # so I enabled global access to DNS...
  interface: 0.0.0.0
  interface: ::0
  access-control: 0.0.0.0/0 allow
  access-control: ::/0 allow

  #access-control: 0.0.0.0/8 allow  (redundant now, see above)
  include: /etc/unbound/local-blocking-data.conf

do-not-query-localhost: no
forward-zone:
  name: "."
  forward-addr: 127.0.0.1@5353
  forward-addr: 127.0.0.1@5354
  forward-addr: 127.0.0.1@5355
  forward-addr: 127.0.0.1@5356