fix unbound config

hosts/fw.cloonar.com/modules/unbound.nix

@@ -1,6 +1,7 @@
 { config, ... }: {
   services.unbound = {
     enable = true;
+    settings = {
       server = {
         interface = [ "10.42.96.1" "10.42.97.1" "10.42.99.1" "10.42.254.1" ];
         tls-cert-bundle = "/var/lib/acme/fw.cloonar.com/fullchain.pem";
@@ -115,6 +116,7 @@
         }
       ];
     };
+  };
 
   security.acme.certs.fw = {
     domain = "fw.cloonar.com";