-- SPDX-License-Identifier: GPL-3.0-or-later
-- Refer to manual: https://knot-resolver.readthedocs.io/en/stable/
-- Listen on localhost and external interface
net.listen('127.0.0.1', 5353)
net.listen('127.0.0.1', 8853, { tls = true })
net.ipv6=false

-- Auto-maintain root TA
trust_anchors.add_file('.local/etc/knot-resolver/root.keys')

cache.size = 1024 * MB

-- Load Useful modules
modules = {
	'workarounds < iterate',
	'policy',   -- Block queries to local zones/bad sites
	'view',     -- Views for certain clients
	'hints > iterate', -- Allow loading /etc/hosts or custom root hints
	'stats',    -- Track internal statistics
}

-- avoid TC flags returned to respdiff
local _, up_bs = net.bufsize()
net.bufsize(4096, up_bs)

log_level('debug')