migrate to pi-hole v6 and alpine container image

docker-build/unbound-pihole.conf

@@ -2,7 +2,7 @@ server:
     # https://manpages.debian.org/bullseye/unbound/unbound.conf.5.en.html
     # 
     # If no logfile is specified, syslog is used
-    # logfile: "/var/log/unbound/unbound.log"
+    logfile: "/var/log/unbound/unbound.log"
     verbosity: 0
 
     interface: 127.0.0.1
@@ -11,16 +11,27 @@ server:
     do-udp: yes
     do-tcp: yes
 
-    # Maybe set to yes if you have IPv6 connectivity
-    do-ip6: no
+    # Maybe set to no if you don't have IPv6 connectivity
+    do-ip6: yes
 
     # You want to leave this to no unless you have *native* IPv6. With 6to4 and
     # Terredo tunnels your web browser should favor IPv4 for the same reasons
     prefer-ip6: no
 
+    # if given, user privileges are dropped (after binding port),          
+    # and the given username is assumed. Default is user "unbound".        
+    # If you give "" no privileges are dropped.                            
+    username: "unbound" 
+
     # Use this only when you downloaded the list of primary root servers!
     # If you use the default dns-root-data package, unbound will find it automatically
-    root-hints: "/var/lib/unbound/root.hints"
+    root-hints: "/etc/unbound/root.hints"
+    
+    # File with trusted keys for validation. Specify more than one file
+    # with several entries, one file per entry.                     
+    # Zone file format, with DS and DNSKEY entries.                 
+    # Note this gets out of date, use auto-trust-anchor-file please.
+    trust-anchor-file: "/usr/share/dnssec-root/trusted-key.key"
 
     # Trust glue only if it is within the server's authority
     harden-glue: yes
@@ -65,7 +76,7 @@ server:
     # Ensure kernel buffer is large enough to not lose messages in traffic spikes
     so-rcvbuf: 1m
 
-    # increase cache size to utilize more RAM
+    # increase cache size to utilize more RAM | msg * 2 = rrset
     msg-cache-size: 128m
     rrset-cache-size: 256m
 
@@ -84,5 +95,5 @@ server:
     private-address: 169.254.0.0/16
     private-address: 172.16.0.0/12
     private-address: 10.0.0.0/8
-    #private-address: fd00::/8
-    #private-address: fe80::/10
+    private-address: fd00::/8
+    private-address: fe80::/10