#!/bin/bash
rm -f managed-keys.* root.hints.txt unbound.root.key.txt
wget http://a.moot-servers.net/root.hints.txt http://a.moot-servers.net/unbound.root.key.txt
tmpf=$0.tmp
echo "options {" > $tmpf
echo "    directory \".\";" >> $tmpf
echo "    allow-query { any; };" >> $tmpf
echo "    listen-on port 53 { 127.0.0.1; };" >> $tmpf
echo "    dnssec-validation yes;" >> $tmpf
echo "    managed-keys-directory \".\";" >> $tmpf
echo "};" >> $tmpf
echo "" >> $tmpf
echo "zone \".\" {" >> $tmpf
echo "    type hint;" >> $tmpf
echo "    file \"root.hints.txt\";" >> $tmpf
echo "};" >> $tmpf
echo "" >> $tmpf
echo "trust-anchors {" >> $tmpf
while [ "1" ]; do
  read a b c d e f g h
  if [ $? -ne 0 ]; then break; fi
  echo "  \".\" initial-key $e $f $g \"$h\";" >> $tmpf
done < unbound.root.key.txt
echo "};" >> $tmpf
mv $tmpf named.conf
echo "named -c named.conf -T mkeytimers=1/6/180"
exit 0