Failsafe

diff --git a/modules/unbound/templates/unbound.conf.erb b/modules/unbound/templates/unbound.conf.erb
index fe710ea916e09e8774cab7e85c3601d63257ac87..17683a862031792d90df99eacccf35fa0cf57b7f 100644 (file)
--- a/modules/unbound/templates/unbound.conf.erb
+++ b/modules/unbound/templates/unbound.conf.erb
@@ -44,7 +44,8 @@ server:
        auto-trust-anchor-file: "/var/lib/unbound/root.key"
        auto-trust-anchor-file: "/var/lib/unbound/debian.org.key"
 
-<% if (not @is_recursor) and @ns -%>
+# recursive: <%= @is_recursor ? "y" : "n" %>
+<% if (not @is_recursor) and (not @ns.empty?) -%>
 forward-zone:
        name: "."
 <% @ns.to_a.flatten.each do |nms| -%>