server:
	verbosity: 5
	num-threads: 1
	interface: 127.0.0.1@@PORT@
	interface: 127.0.0.1@@PROXYPORT@
	interface: 127.0.0.1@@PROXYTLSPORT@
	interface: @INTERFACE_ALLOW_ADDR@@@PORT@
	interface: @INTERFACE_ALLOW_ADDR@@@PROXYPORT@
	interface: @INTERFACE_ALLOW_ADDR@@@PROXYTLSPORT@
	interface: @INTERFACE_REFUSE_ADDR@@@PORT@
	interface: @INTERFACE_REFUSE_ADDR@@@PROXYPORT@
	interface: @INTERFACE_REFUSE_ADDR@@@PROXYTLSPORT@
	proxy-protocol-port: @PROXYPORT@
	proxy-protocol-port: @PROXYTLSPORT@
	tls-port: @PROXYTLSPORT@
	use-syslog: no
	directory: .
	pidfile: "unbound.pid"
	chroot: ""
	username: ""
	do-not-query-localhost: no
	tls-service-key: "unbound_server.key"
	tls-service-pem: "unbound_server.pem"

	# 127.0.0.0/8 is allowed by default.
	access-control: @CLIENT_ADDR_ALLOW@/32 allow
	access-control: @CLIENT_ADDR_REFUSE@/32 refuse
	access-control: @CLIENT_ADDR_ALLOW6@/128 allow
	access-control: @CLIENT_ADDR_REFUSE6@/128 refuse
	access-control: @INTERFACE_ALLOW_ADDR@/32 allow

forward-zone:
	name: "."
	forward-addr: "127.0.0.1@@TOPORT@"