shell-things/etc/dnscrypt-proxy/dnscrypt-proxy.toml

46 lines
1.7 KiB
TOML
Raw Normal View History

2018-10-07 12:45:45 +02:00
# Empty listen_addresses to use systemd socket activation
listen_addresses = []
# The fastest working servers are automatically picked.
server_names = ['cloudflare-ipv6', 'quad9-ip6-nofilter-pri', 'quad9-ip6-nofilter-alt', 'cloudflare', 'google', 'quad9-ip4-nofilter-pri', 'quad9-ip4-nofilter-alt']
2018-10-07 12:45:45 +02:00
# hosts-file via dnscrypt-proxy that is probably only of interest to me.
#cloaking_rules = '/etc/dnscrypt-proxy/hosts-mikaela.txt'
2018-10-07 12:45:45 +02:00
ipv4_servers = true
ipv6_servers = true
block_ipv6 = false
2018-10-07 12:45:45 +02:00
require_dnssec = true
require_nofilter = true
# Use Google DNS B for resolving the server_names[] if the system
# resolver is broken (which it is for me as it points directly to
# dnscrypt-proxy which is not functional at that time.
# The example config recommends DNSSEC support which OpenDNS is missing.
# China: 114.114.114.114:53 according to the example file.
fallback_resolver = '8.8.4.4:53'
2018-10-07 12:45:45 +02:00
cache = true
cache_size = 10000
# Load-balancing
# fastest = always fastest, p2 = random between two fastest, ph = random
# from the fastest half of the configured list, random = any random
# Default is p2, but as my list grew so long and contains so much IPv6 that
# may not work everywhere, I am picking ph just in case.
lb_strategy = 'ph'
2018-10-07 12:45:45 +02:00
# Tor if necessary
#force_tcp = true
#proxy = "socks5://127.0.0.1:9050"
2018-10-07 12:45:45 +02:00
[query_log]
file = '/var/log/dnscrypt-proxy/query.log'
[nx_log]
file = '/var/log/dnscrypt-proxy/nx.log'
[sources]
[sources.'public-resolvers']
url = 'https://download.dnscrypt.info/resolvers-list/v2/public-resolvers.md'
cache_file = '/var/cache/dnscrypt-proxy/public-resolvers.md'
minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
refresh_delay = 72
prefix = ''