Unbound: Difference between revisions

From NixOS Wiki
Initial Commit: added example configuration
 
Added {{expansion}}
 
(2 intermediate revisions by the same user not shown)
Line 1: Line 1:
{{Expansion}}
== Example configuration ==
== Example configuration ==
<syntaxhighlight lang="nixos">
<syntaxhighlight lang="nixos">
Line 5: Line 7:
     settings = {
     settings = {
       server = {
       server = {
         # When only using Unbound as DNS, ensure that the enabled interface is a locally reachable
         # When only using Unbound as DNS, make sure to replace 127.0.0.1 with your ip address
         # When using Unbound in combination with pi-hole or Adguard, point them to 127.0.0.1:PORT
         # When using Unbound in combination with pi-hole or Adguard, leave 127.0.0.1, and point Adguard to 127.0.0.1:PORT
         interface = [ "127.0.0.1" ];
         interface = [ "127.0.0.1" ];
         port = 5335;
         port = 5335;
Line 35: Line 37:
   };
   };
</syntaxhighlight>
</syntaxhighlight>
[[Category:Applications]]
[[Category:Networking]]
[[Category:Server]]

Latest revision as of 09:46, 26 June 2024

Example configuration

services.unbound = {
    enable = true;
    settings = {
      server = {
        # When only using Unbound as DNS, make sure to replace 127.0.0.1 with your ip address
        # When using Unbound in combination with pi-hole or Adguard, leave 127.0.0.1, and point Adguard to 127.0.0.1:PORT
        interface = [ "127.0.0.1" ];
        port = 5335;
        access-control = [ "127.0.0.1 allow" ];
        # Based on recommended settings in https://docs.pi-hole.net/guides/dns/unbound/#configure-unbound
        harden-glue = true;
        harden-dnssec-stripped = true;
        use-caps-for-id = false;
        prefetch = true;
        edns-buffer-size = 1232;

        # Custom settings
        hide-identity = true;
        hide-version = true;
      };
      forward-zone = [
        # Example config with quad9
        {
          name = ".";
          forward-addr = [
            "9.9.9.9#dns.quad9.net"
            "149.112.112.112#dns.quad9.net"
          ];
          forward-tls-upstream = true;  # Protected DNS
        }
      ];
    };
  };