add validation of Unbound advanced configuration
Something similar to dnsmasq's advanced config validation would be helpful for Unbound, to prevent users from creating configs with invalid syntax.
Rearrange calls in unbound.inc so config text can be generated without writing the actual file and a syntax check can be run. Rearrange services_unbound.php to wait until input checking is complete before saving things to global config and run syntax check as part of input checking. Implements #4411.
#1 Updated by Paul K about 6 years ago
One thing you might consider is adding 'server:' as the last keyword in all configuration files that are included in the main config file. That would effectively "break out" from whatever directive was last used in the included file. This way you wouldn't have to add 'server: in the advanced options and might prevent other issues down the road.