diff --git a/roles/unbound/templates/recursive.conf.j2 b/roles/unbound/templates/recursive.conf.j2
index b24613f..0ba6f5b 100644
--- a/roles/unbound/templates/recursive.conf.j2
+++ b/roles/unbound/templates/recursive.conf.j2
@@ -5,9 +5,9 @@ server:
     log-time-ascii: yes
 
     # Only log errors.
-    verbosity: 3
+    verbosity: 0
+    log-servfail: yes
 
-    # "" sends logs to stderr, journalctl will pick things up.
     logfile: "/var/log/unbound/unbound.log"
 
     do-ip4: yes