unbound configuration for ubuntu 22.04

unbound.conf

server:
    tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
    qname-minimisation: yes
    interface: eth0
    access-control: 192.168.0.0/16 allow
    logfile: "/var/log/unbound.log"
    use-syslog: no
    do-ip6: no
    prefetch: yes
    cache-max-ttl: 14400
    cache-min-ttl: 11000
    aggressive-nsec: yes
    use-caps-for-id: yes
    num-threads: 4
    msg-cache-slabs: 8
    rrset-cache-slabs: 8
    infra-cache-slabs: 8
    key-cache-slabs: 8
    rrset-cache-size: 256m
    msg-cache-size: 128m
    so-rcvbuf: 8m
    harden-dnssec-stripped: yes
    hide-identity: yes
    hide-version: yes
    root-hints: /usr/share/dns/root.hints    

forward-zone:
    name: "."
    forward-ssl-upstream: yes
    ## Also add IBM IPv6 Quad9 over TLS
    forward-addr: 9.9.9.9@853#dns.quad9.net
    forward-addr: 149.112.112.112@853#dns.quad9.net