Bring config more in-line with Let's Encrypt unbound.conf (#13)

jsha · Oct 5, 2023 · bc81430 · bc81430
1 parent 3813b79
commit bc81430
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/unbound.conf b/unbound.conf
@@ -85,7 +85,8 @@ server:
     hide-version: yes
     harden-glue: yes
     harden-dnssec-stripped: yes
-    use-caps-for-id: yes
+    harden-below-nxdomain: no
+    use-caps-for-id: no
     cache-min-ttl: 0
     cache-max-ttl: 0
     cache-max-negative-ttl: 0
@@ -96,6 +97,7 @@ server:
     val-clean-additional: yes
     val-sig-skew-max: 0
     val-sig-skew-min: 0
-    val-log-level: 2
     ede: yes
     ipsecmod-enabled: no
+    qname-minimisation: no
+    qname-minimisation-strict: no