Try not to set forwarders when they are bad

diff --git a/modules/unbound/templates/unbound.conf.erb b/modules/unbound/templates/unbound.conf.erb
index 74cf4bb..026126b 100644 (file)
--- a/modules/unbound/templates/unbound.conf.erb
+++ b/modules/unbound/templates/unbound.conf.erb
@@ -52,7 +52,7 @@ server:
 
 <%=
        out = []
-       unless nodeinfo['misc']['resolver-recursive']
+       unless nodeinfo['misc']['resolver-recursive'] and not nodeinfo['hoster']['nameservers_break_dnssec']
                forwarders = nodeinfo['hoster']['nameservers']
                forwarders ||= []