I have a use case where I need to map an entire domain (dev.example.com as an example) to a specific computer on the network that unbound is looking for.
Except for let's encrypt txt records which I need to go up to a public dns that is the authority name server for the domain.
Creating the wildcard is easy in the a-records.conf file.
Is there any way to say "except if a record is auto_verify.dev.example.com" in which case, send to the upstream dns server somehow? Or do I have to constantly update the a-records.conf file with every entry?