i enabled the last two options and it seems like it’s working now. can you please confirm if it looks right
root@Pi-hole:~# mv /etc/unbound/unbound.conf.d/root-auto-trust-anchor-file.bak /etc/unbound/unbound.conf.d/root-auto-trust-anchor-file.conf
root@Pi-hole:~# systemctl restart unbound
root@Pi-hole:~# dig @127.0.0.1 -p 5335 google.com
; <<>> DiG 9.16.33-Debian <<>> @127.0.0.1 -p 5335 google.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3423
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;google.com. IN A
;; ANSWER SECTION:
google.com. 300 IN A 142.250.217.78
;; Query time: 80 msec
;; SERVER: 127.0.0.1#5335(127.0.0.1)
;; WHEN: Tue Sep 27 05:42:58 PDT 2022
;; MSG SIZE rcvd: 55
root@Pi-hole:~# delv @127.0.0.1 -p 5335 cyberciti.biz A
; fully validated
cyberciti.biz. 300 IN A 172.66.40.203
cyberciti.biz. 300 IN A 172.66.43.53
cyberciti.biz. 300 IN RRSIG A 13 2 300 20220928134309 20220926114309 34505 cyberciti.biz. vQqx+Twwr1ROVRt6AEUPsHDuZBQOSjaa9X/2VvSf02HxaIvDe1jZ06F1 1+yEu7CZ3Y/oWHWF6N/tUamnkH89Mg==