server:
  port: 8953
  access-control: 10.0.0.0/8 allow
  access-control: 127.0.0.0/8 allow
  cache-max-ttl: 14400
  cache-min-ttl: 900
  do-tcp: yes
  hide-identity: yes
  hide-version: yes
  interface: 0.0.0.0
  minimal-responses: yes
  prefetch: yes
  qname-minimisation: yes
  rrset-roundrobin: yes
  ssl-upstream: yes
  use-caps-for-id: yes
  verbosity: 1
  do-ip4: yes
  do-ip6: no
  outgoing-port-permit: "10240-65335"
  outgoing-range: 60
  num-queries-per-thread: 30
  msg-buffer-size: 8192
  infra-cache-numhosts: 200
  msg-cache-size: 100k
  rrset-cache-size: 100k
  key-cache-size: 100k
  neg-cache-size: 10k
  target-fetch-policy: "2 1 0 0 0 0"
  harden-large-queries: yes
  harden-short-bufsize: yes
  tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
  unblock-lan-zones: yes
  insecure-lan-zones: yes

  private-domain: "home.asrivas.me"
  domain-insecure: "home.asrivas.me"
  local-zone: "home.asrivas.me." static
  local-data: "webserver.home.asrivas.me. IN A 192.168.1.143"

forward-zone:
  name: "."
  forward-tls-upstream: yes
  forward-addr: 1.1.1.1@853#cloudflare-dns.com