config unbound

$TTL 30
$ORIGIN blacklist.invalid.
@       SOA blacklist.invalid. hostmaster.blacklist.invalid ( 1 12h 15m 3w 2h)
        NS localohst.
32.75.13.119.203.rpz-ip CNAME postpi.org.
32.76.13.119.203.rpz-ip CNAME postpi.org.


local-zone: 10.in-addr.arpa redirect
local-data: "10.in-addr.arpa PTR Jaringan.SDN."
local-zone: 168.192.in-addr.arpa redirect
local-data: "168.192.in-addr.arpa PTR Jaringan.SDN."
local-zone: 16.172.in-addr.arpa redirect
local-data: "16.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 17.172.in-addr.arpa redirect
local-data: "17.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 18.172.in-addr.arpa redirect
local-data: "18.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 19.172.in-addr.arpa redirect
local-data: "19.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 20.172.in-addr.arpa redirect
local-data: "20.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 21.172.in-addr.arpa redirect
local-data: "21.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 22.172.in-addr.arpa redirect
local-data: "22.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 23.172.in-addr.arpa redirect
local-data: "23.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 24.172.in-addr.arpa redirect
local-data: "24.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 25.172.in-addr.arpa redirect
local-data: "25.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 26.172.in-addr.arpa redirect
local-data: "26.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 27.172.in-addr.arpa redirect
local-data: "27.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 28.172.in-addr.arpa redirect
local-data: "28.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 29.172.in-addr.arpa redirect
local-data: "29.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 30.172.in-addr.arpa redirect
local-data: "30.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 31.172.in-addr.arpa redirect
local-data: "31.172.in-addr.arpa PTR Jaringan.SDN."
local-zone: 176.149.103.in-addr.arpa redirect
local-data: "176.149.103.in-addr.arpa PTR content.sdn.net.id."
local-zone: 146.168.103.in-addr.arpa redirect
local-data: "146.168.103.in-addr.arpa PTR google.sdn.net.id."

local-data: "google.com A 216.239.38.120"
local-data: "www.google.com A 216.239.38.120"
local-data: "google.com CNAME forcesafesearch.google.com"
local-data: "www.google.com CNAME forcesafesearch.google.com"

server:

        verbosity: 1
        interface: 0.0.0.0
        cache-min-ttl: 1200
        cache-max-ttl: 14400
        hide-version: yes
        hide-identity: yes
        prefetch: yes
        module-config: "respip iterator"

        access-control: 103.170.100.0/23 allow
        access-control: 103.77.78.63 allow
        access-control: 10.0.0.0/8 allow
        access-control: 127.0.0.0/8 allow
        access-control: 192.168.0.0/16 allow

        auto-trust-anchor-file: "/usr/local/etc/unbound/root.key"

        include: "/usr/local/etc/unbound/reverse_local_zone"
        include: "/usr/local/etc/unbound/forcesafesearch_google_com"

rpz:
        name: "blacklist.invalid"
        zonefile: /usr/local/etc/unbound/rpz.zone

forward-zone:
        name: "tiktok.com"
        forward-addr: 8.8.8.8

forward-zone:
        name: "."
        forward-addr: 203.119.13.77@5003
        forward-addr: 203.119.13.78@5003