I run unbound alongside pihole for extra privacy and I keep my unbound config in git. I have gitea set up to push out new unbound configs every time there’s a git push.