# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1781209827 -7200
# Node ID 36aac3343563cfccb26e3fbaee45397b19704a08
# Parent  37612a03220d970ac96f04e96527dad869bb6fcd
net.unbound: Respect use_dnssec=false in case of default TA in lua-event

diff -r 37612a03220d -r 36aac3343563 net/unbound.lua
--- a/net/unbound.lua	Thu Jun 11 22:19:08 2026 +0200
+++ b/net/unbound.lua	Thu Jun 11 22:30:27 2026 +0200
@@ -48,7 +48,10 @@
 			conf[option] = default;
 		end
 	end
-	if use_dnssec ~= false then
+	if use_dnssec == false then
+		conf["trustfile"] = nil;
+		conf["trusted"] = nil;
+	elseif use_dnssec ~= false then
 		if conf["trustfile"] == nil and conf["trusted"] == nil then
 			conf["trustfile"] = trustfile;
 		end