setup site_unbound with a basic caching-only configuration and include that on

the openvpn gateway (see #1172)

1 files changed, 20 insertions, 0 deletions

diff --git a/puppet/modules/site_unbound/manifests/init.pp b/puppet/modules/site_unbound/manifests/init.pp
new file mode 100644
index 00000000..6a210ab2
--- /dev/null
+++ b/puppet/modules/site_unbound/manifests/init.pp
@@ -0,0 +1,20 @@
+class site_unbound {
+
+  class { 'unbound':
+    root_hints => false,
+    anchor     => false,
+    ssl        => false
+    settings   => {
+      server       => {
+        verbosity      => '1',
+        interface      => [ '127.0.0.1', '::1' ],
+        port           => '53',
+        hide-identity  => 'yes',
+        hide-version   => 'yes',
+        harden-glue    => 'yes',
+        access-control => [ '127.0.0.0/8 allow', '::1 allow' ]
+      }
+    }
+  }
+
+}