Template:Unbound configuration for TLS forwarding to botnet nameserver

  tls-upstream: yes                                                                                                                                                                                                            
  tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem                                                                                                                                                                 
forward-zone:
   name: "."                                                                                                                                                                                                                          
   # Cloudflare DNS                                                                                                                                                                                                                    
   forward-addr: 2606:4700:4700::1111@853#cloudflare-dns.com                                                                                                                                                                           
   forward-addr: 1.1.1.1@853#cloudflare-dns.com                                                                                                                                                                                        
   forward-addr: 2606:4700:4700::1001@853#cloudflare-dns.com                                                                                                                                                                           
   forward-addr: 1.0.0.1@853#cloudflare-dns.com