# Example /etc/itkacl.conf. These are the only accepted keywords currently.

# What zone to look up results in.
zone itkacl.as58302.net

# Recommended.
#
# NOTE: For performance reasons, the library will read /etc/resolv.conf
# and use the resolver there (if you have one). This means that
# 
#   a) Your recursive resolver(s) must support DNSSEC, too.
#   b) You must trust the path between yourself and the resolvers.
#
# The simplest way to satisfy both of these is probably to run a local
# instance of unbound or BIND, and then point resolv.conf to localhost.

#require-dnssec

# You need a trust anchor if you want DNSSEC to work. If you have working
# DNSSEC delegation all the way from the root, you can generate this with:
#
#   sudo unbound-anchor -a /etc/unbound/root.key
#
# If not, you will need to add your own trust anchor in the right format here.

#dnssec-public-key /etc/unbound/root.key