Try not to set forwarders when they are bad

diff --git a/modules/unbound/templates/unbound.conf.erb b/modules/unbound/templates/unbound.conf.erb
index 74cf4bb22e417955e8d49abace146819348d5245..026126bd0f2740972c4d6d6907a7d0675cbf2982 100644 (file)
--- a/modules/unbound/templates/unbound.conf.erb
+++ b/modules/unbound/templates/unbound.conf.erb
@@ -52,7 +52,7 @@ server:
 
 <%=
        out = []
-       unless nodeinfo['misc']['resolver-recursive']
+       unless nodeinfo['misc']['resolver-recursive'] and not nodeinfo['hoster']['nameservers_break_dnssec']
                forwarders = nodeinfo['hoster']['nameservers']
                forwarders ||= []