# Unbound configuration file for Debian.
#
# See the unbound.conf(5) man page.
#
# See /usr/share/doc/unbound/examples/unbound.conf for a commented
# reference config file.
#
# The following line includes additional configuration files from the
# /etc/unbound/unbound.conf.d directory.

server:
    interface: 0.0.0.0                       # Listen on all interfaces
    access-control: 0.0.0.0/0 allow          # Allow access from all networks
    verbosity: 1                             # Set verbosity for easier troubleshooting (optional)

    # Enable caching
    msg-cache-size: 50m                      # Message cache size (adjust as needed)
    rrset-cache-size: 100m                   # Resource record set cache size (adjust as needed)
    cache-max-ttl: 86400                     # Max time-to-live for cache (1 day)
    cache-min-ttl: 3600                      # Min time-to-live for cache (1 hour)

    # Timeout settings for faster fallback if cache/local records fail
    infra-host-ttl: 60                       # Cache infrastructure hosts for 1 minute
    infra-lame-ttl: 600                      # Cache lame delegations for 10 minutes
    do-ip4: yes                              # Only use IPv4 if your ISP DNS does not support IPv6
    do-ip6: no                               # Disable IPv6 if not needed
    do-udp: yes                              # Enable UDP for DNS
    do-tcp: yes                              # Enable TCP for DNS

forward-zone:
    name: "."                                # Forward all other queries
    forward-addr: 8.8.8.8                # Primary ISP DNS server
    forward-addr: 1.1.1.1                # Secondary ISP DNS server

include-toplevel: "/etc/unbound/unbound.conf.d/*.conf"