aboutsummaryrefslogtreecommitdiffstats
path: root/unbound.conf.erb
diff options
context:
space:
mode:
Diffstat (limited to 'unbound.conf.erb')
-rw-r--r--unbound.conf.erb5
1 files changed, 5 insertions, 0 deletions
diff --git a/unbound.conf.erb b/unbound.conf.erb
index 4755c83..1490c41 100644
--- a/unbound.conf.erb
+++ b/unbound.conf.erb
@@ -96,6 +96,11 @@ server:
<% end -%>
<% end -%>
+# Zones which are always insecure, because they don't exist on the Internet.
+<% insecure_zones.split.each do |zone| -%>
+ domain-insecure: <%= zone %>
+<% end -%>
+
# DN42 zones. These don't need to be private, but should be insecure for now.
# Ideally we'd have a way to validate these properly.
<% dn42_zones.split.each do |zone| %>