# auto-trust-anchor-file: ""
auto-trust-anchor-file: "/var/lib/unbound/root.key"
auto-trust-anchor-file: "/var/lib/unbound/debian.org.key"
+<% if not @firewall_blocks_dns %>
auto-trust-anchor-file: "/var/lib/unbound/29.172.in-addr.arpa.key"
+<% end -%>
prefetch: yes
prefetch-key: yes
-<% if not hiera('firewall_blocks_dns', false) %>
+<% if not @firewall_blocks_dns %>
local-zone: "29.172.in-addr.arpa" nodefault
forward-zone:
name: "29.172.in-addr.arpa"