CCCHH/ansible-infra
CCCHH/ansible-infra
2
2
Fork 1
Code Issues 10 Pull requests 8 Wiki Activity Actions

WIP: new z9 ccchh router #98

Draft
bitwhisker wants to merge 15 commits from new_ccchh_router into main
pull from: new_ccchh_router
merge into: CCCHH:main
Conversation 2 Commits 15 Files changed 44 +35 -40
1 changed files with 35 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit 960315d182 - Show all commits

unbound(role): reformat config template and use all vcpus
Some checks failed
/ build (pull_request) Failing after 2m41s
Details
/ Ansible Lint (push) Failing after 2m44s
Details
/ Ansible Lint (pull_request) Failing after 2m44s
Details

Prev Next
bitwhisker 2026-05-26 10:19:42 +02:00
commit 960315d182
Signed by: bitwhisker
SSH key fingerprint: SHA256:KybIk/tusSKao6eLGY+ILlFa1rCrzwx66/acBAcKUqE

7
roles/unbound/templates/unbound.conf.j2
View file

@ -2,17 +2,13 @@
# unbound.conf(5) man page # unbound.conf(5) man page
server: server:
{% if unbound_enable_dnssec -%} {% if unbound_enable_dnssec -%}
# disable chroot because unbound is the only thing running on the VM
# and because it has issues with how archlinux configures the systemd units write protection regarding the anchor file
chroot: ""
# location of the trust anchor file that enables DNSSEC # location of the trust anchor file that enables DNSSEC
# this file is generated by the `unbound-anchor` command # this file is generated by the `unbound-anchor` command
bitwhisker marked this conversation as resolved Outdated
june commented 2026-05-24 18:44:00 +02:00
Outdated
Copy link

Is this still relevant on Debian? Again, we don't use Arch Linux in our infra.

Is this still relevant on Debian? Again, we don't use Arch Linux in our infra.
auto-trust-anchor-file: "/etc/unbound/trusted-key.key" auto-trust-anchor-file: "/etc/unbound/trusted-key.key"
{% endif -%} {% endif -%}
# use all CPUs # use all CPUs
num-threads: 2 num-threads: {{ ansible_facts['processor_vcpus'] }}
# more cache memory # more cache memory
rrset-cache-size: 60m rrset-cache-size: 60m
@ -69,5 +65,4 @@ auth-zone:
for-downstream: no for-downstream: no
for-upstream: yes for-upstream: yes
{% endfor %} {% endfor %}