saarphil/unbound repository overview

mkdir -p assets/unbound/unbound.conf.d/

cat <<EOL > assets/unbound/unbound.conf
include-toplevel: "/etc/unbound/unbound.conf.d/*.conf"
EOL

cat <<EOL > assets/unbound/unbound.conf.d/server.conf
server:
  auto-trust-anchor-file: "/var/lib/unbound/root.key"
  extended-statistics: yes
  use-syslog: no
  interface: 0.0.0.0@53
  interface: ::0@53
  access-control: 0.0.0.0/0 allow
EOL

cat <<EOL > assets/unbound/unbound.conf.d/remote-control.conf
remote-control:
  control-enable: yes
  control-interface: /var/run/socket/unbound.ctl
  control-use-cert: no
  control-port: 8953
  server-key-file: "/etc/unbound/unbound_server.key"
  server-cert-file: "/etc/unbound/unbound_server.pem"
  control-key-file: "/etc/unbound/unbound_control.key"
  control-cert-file: "/etc/unbound/unbound_control.pem"
EOL

services:

  unbound:
    container_name: unbound
    image: saarphil/unbound:latest
    restart: unless-stopped
    volumes:
      - "${PWD}/assets/unbound/:/etc/unbound/"
    ports:
      - 53:53
      - 53:53/udp

  unbound_exporter:
    container_name: unbound_exporter
    image: saarphil/unbound_exporter:latest
    command: '-unbound.host=unix:///var/run/socket/unbound.ctl'
    restart: unless-stopped
    volumes:
      - "${PWD}/assets/unbound/:/etc/unbound/"
    ports:
      - "9167:9167"
    depends_on:
      unbound:
	condition: service_started

volumes:
  socket: