server:
	verbosity: 7
	# num-threads: 1
	interface: 127.0.0.1
	port: @PORT@
	use-syslog: no
	directory: ""
	pidfile: "unbound.pid"
	chroot: ""
	username: ""
	do-not-query-localhost: no
	# for the test, so that DNSSEC verification works.
	#val-override-date: 20230929090000
	trust-anchor: ". DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D"

remote-control:
	control-enable: yes
	control-interface: @CONTROL_PATH@/controlpipe.@CONTROL_PID@
	control-use-cert: no

# for the test, an upstream server in the test setup.
stub-zone:
	name: "."
	stub-addr: 127.0.0.1@@TOPORT@

# hyperlocal root zone
auth-zone:
	name: "."
	fallback-enabled: yes
	for-downstream: no
	for-upstream: yes
	zonefile: "root.zone"
	zonemd-check: yes
	zonemd-reject-absence: yes