CCCHH/ansible-infra
CCCHH/ansible-infra
2
2
Fork 1
Code Issues 7 Pull requests 9 Wiki Activity Actions

unbound(role): reformat config template and use all vcpus
Some checks failed
/ build (pull_request) Failing after 2m41s
Details
/ Ansible Lint (push) Failing after 2m44s
Details
/ Ansible Lint (pull_request) Failing after 2m44s
Details

Browse source
This commit is contained in:
bitwhisker 2026-05-26 10:19:42 +02:00
commit 960315d182
Signed by: bitwhisker
SSH key fingerprint: SHA256:KybIk/tusSKao6eLGY+ILlFa1rCrzwx66/acBAcKUqE
1 changed files with 35 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

7
roles/unbound/templates/unbound.conf.j2
View file

@ -2,17 +2,13 @@
# unbound.conf(5) man page # unbound.conf(5) man page
server: server:
{% if unbound_enable_dnssec -%} {% if unbound_enable_dnssec -%}
# disable chroot because unbound is the only thing running on the VM
# and because it has issues with how archlinux configures the systemd units write protection regarding the anchor file
chroot: ""
# location of the trust anchor file that enables DNSSEC # location of the trust anchor file that enables DNSSEC
# this file is generated by the `unbound-anchor` command # this file is generated by the `unbound-anchor` command
auto-trust-anchor-file: "/etc/unbound/trusted-key.key" auto-trust-anchor-file: "/etc/unbound/trusted-key.key"
{% endif -%} {% endif -%}
# use all CPUs # use all CPUs
num-threads: 2 num-threads: {{ ansible_facts['processor_vcpus'] }}
# more cache memory # more cache memory
rrset-cache-size: 60m rrset-cache-size: 60m
@ -69,5 +65,4 @@ auth-zone:
for-downstream: no for-downstream: no
for-upstream: yes for-upstream: yes
{% endfor %} {% endfor %}