Setting up a local Unbound ad-blocking DNS resolver

I’ve been using dnsmasq as a local DNS resolver for a while, time to switch to Unbound instead.