# This file summaries several files for Unbound configuration, in one file for
# clarity purposes.

# /etc/unbound/unbound.conf
# On Debian this file only contains one non-commented line:
include: "/etc/unbound/unbound.conf.d/*.conf"

# /etc/unbound/unbound.conf.d/root-auto-trust-anchor-file.conf
server:
    # The following line will configure unbound to perform cryptographic
    # DNSSEC validation using the root trust anchor.
    auto-trust-anchor-file: "/var/lib/unbound/root.key"

# /etc/unbound/unbound.conf.d/localhost.conf
# Allow access from localhost
server:
    interface: 127.0.0.1
    interface: ::1
    access-control: 127.0.0.0/8 allow
    access-control: ::1/128 allow

# /etc/unbound/unbound.conf.d/vpn.conf
# Allow access from VPN clients in 10.0.0.0/24 network
server:
    interface: 10.0.0.1
    access-control: 10.0.0.0/24 allow