ansible_role_unbound_cache/templates/unbound.conf.d/server.conf.j2

server:
	interface: 127.0.0.1
	interface: ::1

	access-control: 0.0.0.0/0 deny
	access-control: 0::0/0 deny

	access-control: 127.0.0.0/8 allow
	access-control: ::1/128 allow

{% for listen in unbound_cache_listen%}	interface: {{ listen|ipaddr('address') }}
	access-control: {{ listen|ipaddr('network/prefix') }} allow
{% endfor %}

	do-not-query-localhost: no
	hide-identity: yes
	hide-version: yes