server: interface: 0.0.0.0 access-control: {{ dhcp_cidr }} allow hide-identity: yes hide-version: yes use-syslog: yes cache-max-ttl: 14400 cache-min-ttl: 900 prefetch: yes rrset-roundrobin: yes do-tcp: yes do-ip4: yes do-udp: yes forward-zone: name: "." forward-ssl-upstream: yes forward-addr: {{ dns_primary }}@853 forward-addr: {{ dns_secondary }}@853