ffdo-ansible/roles/internal/ffdo.unbound/templates/unbound-supernode.conf.j2

server:
  # Disables DNSSEC
  module-config: "iterator"
  interface: 0.0.0.0
  interface: ::0
  access-control: {{mesh_ipv4|ipaddr('net')}} allow
  access-control: {{mesh_ipv6|ipaddr('net')}} allow
  access-control: fe80::/10 allow

local-zone: "services.ffdo.de." static
{% for host in groups['supernodes'] %}
local-data: "{{loop.index}}.ntp.services.ffdo.de. A {{host.mesh_ipv4|ipaddr('address')}}"
local-data: "{{loop.index}}.ntp.services.ffdo.de. AAAA {{host.mesh_ipv6|ipaddr('address')}}"
{% endfor %}
local-data: "update.services.ffdo.de. AAAA {{ffruhr_update_server}}"

forward-zone:
  name: .
{% for dns in ffruhr_dns_servers %}
  forward-addr: {{dns}}
{% endfor %}