From 1777d0e154f09e754710c583cdf7437d3c8f8430 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Yoha=C3=AF-Eliel=20BERREBY?= <yberreby@protonmail.ch>
Date: Sat, 18 Apr 2020 15:42:31 +0200
Subject: [PATCH] unbound: log to /var/log/unbound.log, errors only

---
 roles/unbound/templates/recursive.conf.j2 | 7 +++++++
 roles/unbound/templates/unbound.conf.j2   | 2 ++
 2 files changed, 9 insertions(+)

diff --git a/roles/unbound/templates/recursive.conf.j2 b/roles/unbound/templates/recursive.conf.j2
index f650b6c..f5f7f69 100644
--- a/roles/unbound/templates/recursive.conf.j2
+++ b/roles/unbound/templates/recursive.conf.j2
@@ -1,7 +1,14 @@
+# {{ ansible_managed }}
+
 server:
     # Timestamps use UTC ASCII instead of UNIX epoch.
     log-time-ascii: yes
 
+    logfile: /var/log/unbound.log
+
+    # Only log errors.
+    verbosity: 0
+
     do-ip4: yes
     # FIXME: IPv6 deployment... someday...
     do-ip6: no
diff --git a/roles/unbound/templates/unbound.conf.j2 b/roles/unbound/templates/unbound.conf.j2
index b2d7672..ee9a1cf 100644
--- a/roles/unbound/templates/unbound.conf.j2
+++ b/roles/unbound/templates/unbound.conf.j2
@@ -1,3 +1,5 @@
+# {{ ansible_managed }}
+#
 # Unbound configuration file for Debian.
 #
 # See the unbound.conf(5) man page.