Mostly so I remember what I did. Someone might also want it. - fetch.sh pulls three hosts lists, strips comments, dedupes with sort -u - writes /etc/unbound/blocklist.conf as local-zone lines - runs nightly from root's crontab, then unbound-control reload - allowlist.txt gets removed with grep -vxFf before writing Not done: - nothing validates the download, a truncated list would just apply. Shoul…