feat: several updates

config/dns-unbound.nix

@@ -32,6 +32,9 @@ in
     enable = true;
     port = 9167;
     openFirewall = true;
+    unbound = {
+      host = "unix:///run/unbound/unbound.ctl";
+    };
   };
   services.unbound = {
     enable = true;
@@ -56,6 +59,7 @@ in
         private-address = [
           mask_cidr
         ];
+        do-udp = true;
         do-ip6 = false;
         so-sndbuf = 0;
         access-control = [