diff --git a/unbound/templates/unbound.conf.j2 b/unbound/templates/unbound.conf.j2
index 2eb1341a1a6cfe7e0d8b4c78d2e1a99341b8bfa1..3c40228aa2173cc350b8f3149454346884697c5f 100644
--- a/unbound/templates/unbound.conf.j2
+++ b/unbound/templates/unbound.conf.j2
@@ -2,9 +2,12 @@ server:
 	interface: 0.0.0.0
 	interface: ::
 	prefetch: yes
+	{% for i in unbound_allowed_hosts %}
+	access-control: {{i}} allow
+	{% endfor %}
 
 forward-zone:
 	name: "."
-	{% for i in nameservers %}
+	{% for i in unbound_upstream_hosts %}
 	forward-addr: {{i}}
 	{% endfor %}