# Try to define values for options that don't have "default" options that would
# trigger fast-reload functionality.
server:
	verbosity: 4
	num-threads: 4
	interface: 127.0.0.1
	interface: lo
	port: @PORT@
	interface-action: lo allow
	use-syslog: no
	directory: ""
	pidfile: "unbound.pid"
	chroot: ""
	username: ""
	do-not-query-localhost: no

	module-config: "respip validator iterator"

	outgoing-interface: 127.0.0.1
	outgoing-port-avoid: "3200-3208"

	define-tag: "tag1 tag2 tag3"

	do-nat64: yes
	nat64-prefix: 64:ff9b::0/96
	dns64-prefix: 64:ff9b::0/96
	dns64-ignore-aaaa: "ignore-aaaa.nlnetlabs.nl"

	edns-tcp-keepalive: yes

	response-ip: 192.0.2.0 always_refuse
	access-control: 127.0.0.0/8 allow
	access-control: ::1 allow
	access-control-tag: 192.0.2.0/24 "tag2 tag3"
	interface-tag: lo "tag2 tag3"
	access-control-tag-action: 192.0.2.0/24 tag3 always_refuse
	interface-tag-action: lo tag3 always_refuse
	access-control-tag-data: 192.0.2.0/24 tag2 "A 127.0.0.1"
	interface-tag-data: lo tag2 "A 127.0.0.1"
	access-control-view: 192.0.2.0/24 viewname
	interface-view: lo viewname

	nsid: "ascii_something"

	http-user-agent: "httpuseragent"

	caps-exempt: "nlnetlabs.nl"

	private-address: 10.0.0.0/8
	private-address: 172.16.0.0/12
	private-address: 192.168.0.0/16
	private-address: 169.254.0.0/16
	private-address: fd00::/8
	private-address: fe80::/10
	private-address: ::ffff:0:0/96

	private-domain: "nlnetlabs.nl"

	unwanted-reply-threshold: 10000000

	do-not-query-address: 1.1.1.1
	do-not-query-address: 8.8.8.8
	do-not-query-address: 9.9.9.9

	do-not-query-localhost: no

	trust-anchor: "jelte.nlnetlabs.nl. DS 42860 5 1 14D739EB566D2B1A5E216A0BA4D17FA9B038BE4A"

	domain-insecure: "nlnetlabs.nl"

	serve-expired: yes
	serve-expired-client-timeout: 1800

	val-log-level: 2

	local-zone: refuse.nlnetlabs.nl. refuse
	local-zone: override.nlnetlabs.nl. deny
	local-zone: tag.nlnetlabs.nl. transparent
	local-data: "data.nlnetlabs.nl. TXT localdata"
	local-data-ptr: "192.0.2.3 reverse.nlnetlabs.nl."
	local-zone-tag: "tag.nlnetlabs.nl" "tag2 tag3"
	local-zone-override: "override.nlnetlabs.nl" 192.0.2.0/24 refuse


	ratelimit: 100
	ratelimit-below-domain: ratelimit.nlnetlabs.nl 1000
	ip-ratelimit: 100

	tcp-connection-limit: 192.0.2.0/24 12

	answer-cookie: yes
	cookie-secret:  "000102030405060708090a0b0c0d0e0f"

	ede: yes
	ede-serve-expired: yes

remote-control:
	control-enable: yes
	control-interface: @CONTROL_PATH@/controlpipe.@CONTROL_PID@
	control-use-cert: no

stub-zone:
	name: "stub.nlnetlabs.nl"
	stub-addr: 192.0.2.68
	stub-prime: no
	stub-first: no
	stub-tcp-upstream: no
	stub-tls-upstream: no
	stub-no-cache: no

forward-zone:
	name: "forward.nlnetlabs.nl"
	forward-addr: 192.0.2.68
	forward-first: no
	forward-tcp-upstream: no
	forward-tls-upstream: no
	forward-no-cache: no

auth-zone:
	name: "auth.nlnetlabs.nl"
	for-downstream: yes
	for-upstream: yes
	zonemd-check: no
	zonemd-reject-absence: no
	zonefile: "auth.nlnetlabs.nl.zone"

view:
	name: "viewname"
	local-zone: "view.nlnetlabs.nl" redirect
	local-data: "view.nlnetlabs.nl A 192.0.2.3"
	local-data-ptr: "192.0.2.3 view.nlnetlabs.nl"
	view-first: no

rpz:
	name: "rpz.nlnetlabs.nl"
	zonefile: "rpz.nlnetlabs.nl.zone"
	rpz-action-override: cname
	rpz-cname-override: www.example.org
	rpz-log: yes
	rpz-log-name: "example policy"
	rpz-signal-nxdomain-ra: no
	for-downstream: no
	tags: "tag3"