diff --git a/setup/start.sh b/setup/start.sh index e7be5199f..1befc7947 100755 --- a/setup/start.sh +++ b/setup/start.sh @@ -92,11 +92,6 @@ systemctl restart systemd-journald usermod -a -G adm ${USER} log "Setting up unbound" -# DO uses Google nameservers by default. This causes RBL queries to fail (host 2.0.0.127.zen.spamhaus.org) -# We do not use dnsmasq because it is not a recursive resolver and defaults to the value in the interfaces file (which is Google DNS!) -# We listen on 0.0.0.0 because there is no way control ordering of docker (which creates the 172.18.0.0/16) and unbound -# If IP6 is not enabled, dns queries seem to fail on some hosts. -s returns false if file missing or 0 size -ip6=$([[ -s /proc/net/if_inet6 ]] && echo "yes" || echo "no") cp -f "${script_dir}/start/unbound.conf" /etc/unbound/unbound.conf.d/cloudron-network.conf # update the root anchor after a out-of-disk-space situation (see #269) unbound-anchor -a /var/lib/unbound/root.key diff --git a/setup/start/unbound.conf b/setup/start/unbound.conf index fdceec6fe..bc0e5f62d 100644 --- a/setup/start/unbound.conf +++ b/setup/start/unbound.conf @@ -1,3 +1,6 @@ +# Unbound is used primarily for RBL queries (host 2.0.0.127.zen.spamhaus.org) +# We cannot use dnsmasq because it is not a recursive resolver and defaults to the value in the interfaces file (which is Google DNS!) + server: port: 53 interface: 127.0.0.1