Comment by morazow

Looks nice!

I have similar setup and custom unbound docker container based on distroless.

One suggestion: In unbound use more privacy-centric dns providers. https://www.privacytools.io/providers/dns/