debops.unbound

Unbound is a local DNS resolver. It supports DNSSEC validation and can be used to ensure that DNS queries protected by DNSSEC are signed by the correct DNS root zone key, verified locally.

• Getting started
  • Default configuration
  • Usage with internal RFC 1918 private networks
  • Example inventory
  • Example playbook
  • Ansible tags
• debops.unbound default variables
  • APT packages
  • Server (main) configuration
  • Remote control configuration
  • Custom forward/stub DNS zones
  • Configuration for other Ansible roles
• Default variable details
  • unbound__server
  • unbound__zones
    • Examples
• Default variable details: unbound__server
  • Simple form of the configuration parameters
  • Complex form of the configuration parameters
    • Examples
  • Configuration values and their interactions
    • Example list
    • Base value replacement
    • Lists are merged together
    • How to reset a list
    • Lists don't add duplicates

Copyright

debops.unbound - Manage Unbound, local DNS resolver

Copyright (C) 2017 Maciej Delmanowski <drybjed@gmail.com>
Copyright (C) 2017 DebOps <https://debops.org/>
SPDX-License-Identifier: GPL-3.0-only

This repository is part of DebOps.

DebOps is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License version 3, as
published by the Free Software Foundation.

DebOps is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with DebOps. If not, see https://www.gnu.org/licenses/.