diff --git a/towncrier/newsfragments/2135.bugfix b/towncrier/newsfragments/2135.bugfix
new file mode 100644
index 00000000..3062c09f
--- /dev/null
+++ b/towncrier/newsfragments/2135.bugfix
@@ -0,0 +1 @@
+Enable unbound by default. Mailu now requires a DNSSEC validating DNS resolver and experience has shown that this may not be the default everywhere yet.