From 2f4a25bc7c5ad54059e089f1adf3f087d4a8ad28 Mon Sep 17 00:00:00 2001 From: Paul Wouters Date: Sat, 15 Nov 2008 06:37:26 +0000 Subject: [PATCH] new remote control options. Key/certs enerated on first startup --- unbound.conf | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/unbound.conf b/unbound.conf index ea6d36f..2645b21 100644 --- a/unbound.conf +++ b/unbound.conf @@ -341,6 +341,31 @@ server: # local-zone: "example.com" redirect # local-data: "example.com A 192.0.2.3" +remote-control: + # Enable remote control with unbound-control(8) here. + # set up the keys and certificates with unbound-control-setup. + # reqiured for munin monitoring plugin + control-enable:yes + + # what interfaces are listened to for remote control. + # give 0.0.0.0 and ::0 to listen to all interfaces. + # control-interface: 127.0.0.1 + # control-interface: ::1 + + # port number for remote control operations. + # control-port: 953 + + # unbound server key file. + server-key-file: "/var/lib/unbound/unbound_server.key" + + # unbound server certificate file. + server-cert-file: "/var/lib/unbound/unbound_server.pem" + + # unbound-control key file. + control-key-file: "/var/lib/unbound/unbound_control.key" + + # unbound-control certificate file. + control-cert-file: "/var/lib/unbound/unbound_control.pem" # Stub zones. # Create entries like below, to make all queries for 'example.com' and