From f877ec7657d9905b8c3f99a9b3cb49d3299859c4 Mon Sep 17 00:00:00 2001 From: Jeremy Rand Date: Thu, 15 Dec 2022 07:37:49 +0000 Subject: [PATCH] Move unbound.conf.d examples to separate files Makes it easier for downstream distros to use the files. --- README.md | 16 ++++------------ _doc/unbound.conf.d/ncdns-insecure.conf | 2 ++ _doc/unbound.conf.d/ncdns.conf | 7 +++++++ 3 files changed, 13 insertions(+), 12 deletions(-) create mode 100644 _doc/unbound.conf.d/ncdns-insecure.conf create mode 100644 _doc/unbound.conf.d/ncdns.conf diff --git a/README.md b/README.md index a1cc947..19234a6 100644 --- a/README.md +++ b/README.md @@ -28,19 +28,11 @@ Using ncdns with a recursive resolver ------------------------------------- Of course the daemon can also be used simply as an authoritative nameserver for bit. directly. One way to do this is to run a recursive resolver (such as -Unbound) and configure it to serve the zone as a 'stub zone'. Here is an example -unbound configuration: +Unbound) and configure it to serve the zone as a 'stub zone'. An example +Unbound configuration is in `_doc/unbound.conf.d/ncdns.conf`. - server: - do-not-query-localhost: no - stub-zone: - name: bit. - stub-addr: 127.0.0.1@1153 - -If you don't want to use DNSSEC, also add: - - server: - domain-insecure: bit. +If you don't want to use DNSSEC, an additional Unbound configuration is in +`_doc/unbound.conf.d/ncdns-insecure.conf`. If you do want to use DNSSEC, see the instructions below. diff --git a/_doc/unbound.conf.d/ncdns-insecure.conf b/_doc/unbound.conf.d/ncdns-insecure.conf new file mode 100644 index 0000000..1c24e7a --- /dev/null +++ b/_doc/unbound.conf.d/ncdns-insecure.conf @@ -0,0 +1,2 @@ +server: + domain-insecure: bit. diff --git a/_doc/unbound.conf.d/ncdns.conf b/_doc/unbound.conf.d/ncdns.conf new file mode 100644 index 0000000..22ba818 --- /dev/null +++ b/_doc/unbound.conf.d/ncdns.conf @@ -0,0 +1,7 @@ +server: + do-not-query-localhost: no +stub-zone: + name: bit. + stub-addr: 127.0.0.1@5391 + stub-prime: no + stub-first: no