server:do-not-query-localhost: noforward-zone:name: "."forward-addr: 127.0.0.1@5353forward-addr: ::1@5353
server_names = ['mullvad-doh','mullvad-adblock-doh','nextdns']listen_addresses = ['127.0.0.1:5353','[::1]:5353']max_clients = 250ipv4_servers = trueipv6_servers = truednscrypt_servers = truedoh_servers = truerequire_dnssec = truerequire_nolog = truerequire_nofilter = falseforce_tcp = falsetimeout = 2500keepalive = 30log_level = 2log_file = '/var/log/dnscrypt-proxy/dnscrypt-proxy.log'use_syslog = falsecert_refresh_delay = 240dnscrypt_ephemeral_keys = falsetls_disable_session_tickets = falsefallback_resolver = '193.138.218.74:53'ignore_system_dns = falsenetprobe_timeout = 30log_files_max_size = 10log_files_max_age = 7log_files_max_backups = 1block_ipv6 = falseforwarding_rules = 'forwarding-rules.txt'cloaking_rules = 'cloaking-rules.txt'cache = truecache_size = 2048cache_min_ttl = 600cache_max_ttl = 86400cache_neg_min_ttl = 60cache_neg_max_ttl = 600[query_log]file = '/var/log/dnscrypt-proxy/query.log'format = 'tsv'[nx_log]file = '/var/log/dnscrypt-proxy/nx.log'format = 'tsv'[whitelist]whitelist_file = 'whitelist.txt'log_file = '/var/log/dnscrypt-proxy/whitelisted.log'log_format = 'tsv'[sources][sources.'public-resolvers']urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v2/public-resolvers.md', 'https://download.dnscrypt.info/resolvers-list/v2/public-resolvers.md']cache_file = 'public-resolvers.md'minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'refresh_delay = 72prefix = ''[static]
########################### Unbound Configuration############################# Server configuration##server:chroot: /var/unboundusername: unbounddirectory: /var/unboundpidfile: /var/run/unbound.pidroot-hints: /var/unbound/root.hintsuse-syslog: yesport: 53verbosity: 3extended-statistics: yeslog-queries: yeshide-identity: nohide-version: noharden-referral-path: nodo-ip4: yesdo-ip6: yesdo-udp: yesdo-tcp: yesdo-daemonize: yesso-reuseport: yesmodule-config: "validator iterator"cache-max-ttl: 86400cache-min-ttl: 0harden-dnssec-stripped: noserve-expired: nooutgoing-num-tcp: 10incoming-num-tcp: 10num-queries-per-thread: 4096outgoing-range: 8192infra-host-ttl: 900infra-cache-numhosts: 10000unwanted-reply-threshold: 0jostle-timeout: 200msg-cache-size: 20mrrset-cache-size: 40mnum-threads: 4msg-cache-slabs: 8rrset-cache-slabs: 8infra-cache-slabs: 8key-cache-slabs: 8qname-minimisation: yesqname-minimisation-strict: yesauto-trust-anchor-file: /var/unbound/root.keyprefetch: yesprefetch-key: no# Interface IP(s) to bind tointerface: 0.0.0.0interface: ::interface-automatic: yes# DNS Rebinding# Access listsinclude: /var/unbound/access_lists.conf# Static host entriesinclude: /var/unbound/host_entries.conf# DHCP leases (if configured)include: /var/unbound/dhcpleases.conf# Domain overridesinclude: /var/unbound/domainoverrides.conf# Custom includesinclude: /var/unbound/etc/*.conf# Forwardingforward-zone:name: "."forward-addr: 193.138.218.74forward-addr: 10.0.8.1forward-addr: 9.9.9.9remote-control:control-enable: yescontrol-interface: 127.0.0.1control-port: 953server-key-file: /var/unbound/unbound_server.keyserver-cert-file: /var/unbound/unbound_server.pemcontrol-key-file: /var/unbound/unbound_control.keycontrol-cert-file: /var/unbound/unbound_control.pem