| .. | ||
| defaults | ||
| files | ||
| handlers | ||
| tasks | ||
| templates | ||
| README.md | ||
Unbound DNS resolver
Role for a validating, recursive, caching DNS resolver based on Unbound. It is designed to be fast and lean and incorporates modern features based on open standards.
Role Customization
The following variables can be used to customize this role:
unbound_install_prometheus_exporter: Boolean of whether Unbound Exporter should also be installed to expose resolver statistics in prometheus format. Defaults totrue.unbound_bind_interfaces: List of interface names or IP addresseson which unbound will listen for dns queries. Defaults to[0.0.0.0, ::].unbound_enable_unbound_control: Boolean of whether the remote control feature of unbound should be configured. Defaults totrue.unbound_enable_dnssec: Boolean of whether dnssec validation should be enabled. Defaults totrue.unbound_access_control: Required List of unbound access control values. Defaults to[].unbound_disable_systemd_networkd: Boolean if true, systemd-networkd is disabled and the local system is pointed towards the configured dns resolver. Defaults totrue.unbound_thread_count: The number of threads unbound uses. Defaults to max vCPU Count.