From f50995b5e688b7620b4341ad8d963506d34dc4e3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thomas=20S=C3=A4nger?= <thomas@gecko.space>
Date: Sat, 19 Jan 2019 20:52:59 +0100
Subject: [PATCH] unbound: drop privileges after binding to port

---
 services/unbound/unbound.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/unbound/unbound.conf b/services/unbound/unbound.conf
index d54cbfbc..8abd4325 100644
--- a/services/unbound/unbound.conf
+++ b/services/unbound/unbound.conf
@@ -10,7 +10,7 @@ server:
   do-daemonize: no
   access-control: {{ SUBNET }} allow
   directory: "/etc/unbound"
-  username: root
+  username: unbound
   auto-trust-anchor-file: trusted-key.key
   root-hints: "/etc/unbound/root.hints"
   hide-identity: yes