diff --git a/roles/unbound/templates/recursive.conf.j2 b/roles/unbound/templates/recursive.conf.j2
index f650b6c..f5f7f69 100644
--- a/roles/unbound/templates/recursive.conf.j2
+++ b/roles/unbound/templates/recursive.conf.j2
@@ -1,7 +1,14 @@
+# {{ ansible_managed }}
+
 server:
     # Timestamps use UTC ASCII instead of UNIX epoch.
     log-time-ascii: yes
 
+    logfile: /var/log/unbound.log
+
+    # Only log errors.
+    verbosity: 0
+
     do-ip4: yes
     # FIXME: IPv6 deployment... someday...
     do-ip6: no
diff --git a/roles/unbound/templates/unbound.conf.j2 b/roles/unbound/templates/unbound.conf.j2
index b2d7672..ee9a1cf 100644
--- a/roles/unbound/templates/unbound.conf.j2
+++ b/roles/unbound/templates/unbound.conf.j2
@@ -1,3 +1,5 @@
+# {{ ansible_managed }}
+#
 # Unbound configuration file for Debian.
 #
 # See the unbound.conf(5) man page.