From 4077b27d920496b132957b1a1b9b13b32d9aee96 Mon Sep 17 00:00:00 2001
From: Quentin McGaw <quentin.mcgaw@gmail.com>
Date: Mon, 14 Jan 2019 09:54:49 +0100
Subject: [PATCH] Unbound has TLS cert specified (just in case)

---
 unbound.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/unbound.conf b/unbound.conf
index f0220582..d39fd577 100644
--- a/unbound.conf
+++ b/unbound.conf
@@ -24,6 +24,7 @@ server:
   hide-version: yes
   
   # security
+  tls-cert-bundle: "/etc/ssl/certs/ca-certificates.crt"
   root-hints: "/etc/unbound/root.hints"
   trust-anchor-file: "/etc/unbound/root.key"
   harden-below-nxdomain: yes