---
unbound:
modes:
compose:
enabled: true
swarm:
enabled: true
# nocheck: default-placement-manager engine on-disk state (trust anchors / root hints), node-local in swarm
placement: manager
enabled: true
shared: true
bond: 1
image: ghcr.io/mailu/unbound
name: unbound
version: "2024.06"
min_storage: 283MB
backup:
disabled: true
cpus: "0.5"
mem_reservation: "128m"
mem_limit: "512m"
pids_limit: 256
ports:
internal:
unbound: 53
local:
unbound: 53
onion:
# nocheck: onion-flag a recursive resolver published on the onion is an open resolver, and the containers it serves reach it on the role network
unbound: false
lifecycle: beta
# nocheck: dynamic-flag - the resolver state volume is backup-disabled rebuildable cache, the backup consumer stays permanently off
container_backup:
enabled: false
shared: true
# nocheck: variants-coverage the role has a single variant, and the guide edge is not a dimension of it: a second round would differ only by the README replay
docs:
bond: 0.5
enabled: "{{ 'web-app-docs' in group_names }}"
shared: "{{ 'web-app-docs' in group_names }}"
