unbound: add UCI for forward stub and auth zone clauses

With growing interest, DNS over TLS can be setup in Unbounds foward-zone:
clause. A broader UCI solution is added to support forward-, stub-, and
auth- zone clauses in a new 'zone' section. This implentation required
reworking scripts, because they did not scale. 'forward_domain' and
'prefetch_root' options are removed, and superceded by 'zone' section.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

net/unbound/files/unbound.uci

@@ -9,13 +9,11 @@ config unbound
 	option domain 'lan'
 	option domain_type 'static'
 	option edns_size '1280'
-	option extended_luci '0'
 	option extended_stats '0'
 	option hide_binddata '1'
 	option listen_port '53'
 	option localservice '1'
 	option manual_conf '0'
-	option prefetch_root '0'
 	option protocol 'default'
 	option query_minimize '0'
 	option query_min_strict '0'
@@ -28,9 +26,28 @@ config unbound
 	option unbound_control '0'
 	option validator '0'
 	option validator_ntp '1'
+	option verbosity '1'
 	list trigger_interface 'lan'
 	list trigger_interface 'wan'
-	#list rebind_interface 'lan'
 	#list domain_insecure 'ntp.example.com'
-	#list domain_forward 'mail.example.com'
+
+config zone
+	option enabled '0'
+	option fallback '1'
+	option url_dir 'https://www.internic.net/domain/'
+	option zone_type 'auth_zone'
+	list server 'lax.xfr.dns.icann.org'
+	list server 'iad.xfr.dns.icann.org'
+	list zone_name '.'
+	list zone_name 'arpa.'
+	list zone_name 'in-addr.arpa.'
+	list zone_name 'ip6.arpa.'
+
+config zone
+	option enabled '0'
+	option fallback '1'
+	option resolv_conf '1'
+	option zone_type 'forward_zone'
+	list zone_name 'isp-bill.example.com.'
+	list zone_name 'isp-mail.example.net.'