# Bind only on loopback interface
bind-interfaces
interface=lo
listen-address={{ listen_address }}
# Supress resolv.conf
no-resolv
no-poll
# Upstream dns servers
{% for ip in global_dns_upstream_servers %}
server={{ ip }}
{% endfor %}
# Enable caching
cache-size={{ cache_size }}
# Require full domains to be forwarded
domain-needed
# Verify dnssec values
dnssec
dnssec-check-unsigned