diff --git a/ansible/inventories/production/host_vars/rpi0.home.jthan.io/vars.yaml b/ansible/inventories/production/host_vars/rpi0.home.jthan.io/vars.yaml
index b20d1d9..4b07e0f 100644
--- a/ansible/inventories/production/host_vars/rpi0.home.jthan.io/vars.yaml
+++ b/ansible/inventories/production/host_vars/rpi0.home.jthan.io/vars.yaml
@@ -1,5 +1,5 @@
 private_domains:
-  - home.jthan.io:
+  home.jthan.io:
     records:
       - type: A
         name: "router.home.jthan.io"
diff --git a/ansible/roles/unbound/tasks/templates/unbound.conf.j2 b/ansible/roles/unbound/tasks/templates/unbound.conf.j2
index 6d6d57f..1d3a628 100644
--- a/ansible/roles/unbound/tasks/templates/unbound.conf.j2
+++ b/ansible/roles/unbound/tasks/templates/unbound.conf.j2
@@ -617,10 +617,9 @@ server:
 	{% for domain in private_domains %}
 	private-domain: "{{ domain }}"
 	{% for record in  domain['records'] %}
-	local-data: {{ record['name'] }} {{ record['type'] }} {{ record['value'] }}
+	local-data: "{{ record['name'] }} {{ record['type'] }} {{ record['value'] }}"
 	{% endfor %}
 	{% endfor %}
-	private-domain: "home.jthan.io"
 
 	# If nonzero, unwanted replies are not only reported in statistics,
 	# but also a running total is kept per thread. If it reaches the
@@ -913,20 +912,6 @@ server:
 	# local-data: 'mytext.local TXT "content of text record"'
 	#
 	# You can override certain queries with
-	local-data: "router.home.jthan.io A 192.168.1.1"
-	local-data: "rpi0.home.jthan.io A 192.168.1.2"
-	local-data: "storage0.home.jthan.io A 192.168.1.3"
-	local-data: "proxy0.home.jthan.io A 192.168.1.7"
-	local-data: "storage0.home.jthan.io AAAA 2602:fb57:c20:b00:7a55:36ff:fe02:92c9"
-	local-data: "proxy0.home.jthan.io AAAA 2602:fb57:c20:b00:be24:11ff:fee6:8593"
-
-	local-data: "ha.home.jthan.io CNAME proxy0.home.jthan.io"
-	local-data: "vm0.home.jthan.io CNAME proxy0.home.jthan.io"
-	local-data: "authentik.home.jthan.io A 192.168.1.7"
-	local-data: "authentik.home.jthan.io AAAA 2602:fb57:c20:b00:be24:11ff:fee6:8593"
-	local-data: "cm.home.jthan.io A 192.168.1.10"
-	local-data: "cm.home.jthan.io AAAA 2602:fb57:c20:b00:be24:11ff:fe27:1368"
-	#local-data: "authentik.home.jthan.io CNAME proxy0.home.jthan.io"
 	#
 	# You can redirect a domain to a fixed address with
 	# (this makes example.com, www.example.com, etc, all go to 192.0.2.3)