Unbound DNS Config

unbound.conf

include: "/etc/unbound/unbound.conf.d/*.conf"
server:
    num-threads: 2
    verbosity: 1
    root-hints: /etc/unbound/root.hints
    # auto-trust-anchor-file: /var/lib/unbound/root.key
    interface: 0.0.0.0
    interface: ::0
    max-udp-size: 3072
    access-control: 0.0.0.0/0          refuse
    access-control: 10.5.0.0/24        allow
    access-control: 127.0.0.1          allow
    private-address: 10.5.0.0/24
    hide-identity: yes
    hide-version: yes
    harden-glue: yes
    harden-dnssec-stripped: yes
    harden-referral-path: yes
    unwanted-reply-threshold: 10000000
    val-log-level: 1
    cache-min-ttl: 1800
    cache-max-ttl: 14400
    prefetch: yes
    qname-minimisation: yes
    prefetch-key: yes
    forward-zone:
        name: "."
        forward-addr: 172.31.0.2
        forward-addr: 1.1.1.1
        forward-addr: 8.8.8.8