diff --git a/defaults/main.yml b/defaults/main.yml
new file mode 100644
index 0000000..5ab724c
--- /dev/null
+++ b/defaults/main.yml
@@ -0,0 +1,21 @@
+---
+# unbound defaults/main.yml
+#
+# SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org>
+# SPDX-License-Identifier: Apache-2.0
+
+# which IP addresses to listen on
+unbound_listen_default: false
+unbound_listen_zone_ips: true
+unbound_listen_ips: []
+
+# which addresses to answer queries for
+unbound_allow_all: false
+unbound_allow_zone_ips: "{{ unbound_listen_zone_ips }}"
+unbound_allow_ips: "{{ unbound_listen_ips }}"
+
+# IP of authoritative nameserver that serves stub zones
+unbound_authoritative_server_ip: "127.0.0.1"
+
+# DNS zones
+dns_zones: {}