In my experience with unbound, it tends to return expired records in the hope that they are still valid, causing issues with services hosted in the cloud, where IP addresses rotate regularly. What I did was update the serve-expired-ttl setting in unbound’s configuration to 3 hours (down from the default 24h)

Ah, good idea! I just don’t have any non-magnetic screwdriver at home, I’m afraid as to what might happen if I get its magnetic tip close to a drive.

Oh wait, I found a lousy screwdriver, it works like a charm! It’s definitely the bottom one. Thank you very much!

I personally ended up running my containers on a VM on top of TrueNAS to get the best of both worlds (and because back then running applications directly on TrueNAS SCALE was convoluted)

You could read this article where the author runs NixOS in VMs on top of TrueNAS.

This. I have been using it a lot lately to manipulate CSVs, it is such a godsend.