server: interface: 127.0.0.1 access-control: 127.0.0.0/8 allow root-hints: /etc/unbound/root-hints.cache