From f90943d9e9f96c86f3eeb48fe76f8707491e2215 Mon Sep 17 00:00:00 2001
From: Tommy <contact@tommytran.io>
Date: Tue, 24 Jan 2023 08:57:22 -0500
Subject: [PATCH] Additional unbound hardening

---
 unbound.conf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/unbound.conf b/unbound.conf
index bf2924f..7f07dce 100644
--- a/unbound.conf
+++ b/unbound.conf
@@ -6,7 +6,9 @@ server:
     prefetch-key: yes
     qname-minimisation-strict: yes
     hide-identity: yes
+    hide-trustanchor: yes
     hide-version: yes
+    harden-large-queries: yes
     outgoing-port-permit: 1024-65535
     outgoing-port-avoid: 7275 # supl
     outgoing-port-avoid: 8008 # synapse