server:
  use-syslog: yes
  username: "unbound"
  directory: "/etc/unbound"
  trust-anchor-file: trusted-key.key
  num-threads: 4
  msg-cache-slabs: 4
  rrset-cache-slabs: 4
  infra-cache-slabs: 4
  key-cache-slabs: 4
  outgoing-range: 200
  num-queries-per-thread: 100
  cache-min-ttl: 1800
  cache-max-ttl: 86400
  so-rcvbuf: 2m
  so-sndbuf: 1m
  rrset-cache-size: 50m
  msg-cache-size: 25m
  do-ip4: yes
  do-ip6: yes
  do-udp: yes
  do-tcp: yes
  so-reuseport: yes
  tcp-upstream: no
  do-daemonize: yes
  verbosity: 1
  prefetch: yes
  private-address: 192.168.0.1/24
  unwanted-reply-threshold: 10000
  hide-identity: yes
  hide-version: yes
  val-clean-additional: yes
  harden-short-bufsize: yes
  harden-large-queries: yes
  harden-glue: yes
  harden-dnssec-stripped: yes
  harden-below-nxdomain: yes
  harden-algo-downgrade: yes
  qname-minimisation: yes
  use-caps-for-id: yes

forward-zone:
  name: "."
  forward-addr: 1.1.1.1@853
  forward-addr: 1.0.0.1@853
  forward-addr: 2606:4700:4700::1111@853
  forward-addr: 2606:4700:4700::1001@853
  forward-tls-upstream: yes

remote-control:
  control-enable: yes