# {{ ansible_managed }}

resolution_type: GETDNS_RESOLUTION_STUB
dns_transport_list:
  - GETDNS_TRANSPORT_TLS
tls_authentication: GETDNS_AUTHENTICATION_REQUIRED
tls_query_padding_blocksize: 128
edns_client_subnet_private: 1
round_robin_upstreams: 1
idle_timeout: 10000

listen_addresses:
{% for item in stubby_listen_addresses %}
  - {{ item }}
{% endfor %}

upstream_recursive_servers:
  {{ stubby_upstream_recursive_servers | to_nice_yaml(indent=8) }}