Mikaela
/
shell-things
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

systemd/resolved: adguard-strict -> adguard-dot

This commit is contained in:
Aminda Suomalainen 2020-07-18 14:04:41 +03:00
parent 550b68d149
commit 69f55cd724
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723
2 changed files with 12 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
etc/systemd/resolved.conf.d/adguard-dot.conf Normal file
View File

@ -0,0 +1,12 @@
# AdGuard / systemd-resolved. For people who don't panic when DoT doesn't
# work and captive portals attack? See README.md. Also requires not
# panicking if tbe user needs something AdGuard is blocking.
[Resolve]
DNS=2a00:5a60::ad2:ff#dns.adguard.com 176.103.130.131#dns.adguard.com 2a00:5a60::ad1:ff#dns.adguard.com 176.103.130.130#dns.adguard.com
Domains=~.
# non-tech friendliness in case system down for ages. Also DNSSEC ensures
# the DNS server isn't lying which is a task of adblocking DNS server...
DNSSEC=allow-downgrade
# There is no point of disabling this with adblocking DNS
DNSOverTLS=true
Cache=true

11
etc/systemd/resolved.conf.d/adguard-strict.conf
View File

@ -1,11 +0,0 @@
# AdGuard / systemd-resolved. For people who don't panic when DNSSEC or
# DoT doesn't work and captive portals attack? See README.md
# Also requires not panicking if you need something AdGuard is blocking.
[Resolve]
DNS=2a00:5a60::ad2:ff#dns.adguard.com 176.103.130.131#dns.adguard.com 2a00:5a60::ad1:ff#dns.adguard.com 176.103.130.130#dns.adguard.com
Domains=~.
# In case of adblocking DNS it makes no sense to start disabling these,
# especially DNSOverTLS, so there won't be non-strict version.
DNSSEC=true
DNSOverTLS=true
Cache=true