Mikaela/shell-things
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git synced 2025-08-04 21:27:20 +02:00
Code Issues Projects Releases Wiki Activity

Compare commits

base: Mikaela:85b33cf5f60adf67c5df13b272909a48b0823c49
Branches Tags
Mikaela:cxefa
...
compare: Mikaela:4f50f4a36737037e11dfa6de78cb5c50f86e0ebd
Branches Tags
Mikaela:cxefa

2 Commits
85b33cf5f6 ... 4f50f4a367

Author SHA1 Message Date
Mikaela Suomalainen
4f50f4a367
systemd-resolved: don't DNSSEC with adblocking 2021-11-21 11:37:03 +02:00
Mikaela Suomalainen
12fe7a59a8
etc/systemd/resolved: add configuration for Mullvad DoT 2021-11-21 11:16:11 +02:00
3 changed files with 15 additions and 1 deletions
Show Stats Expand all files Collapse all files

2
etc/systemd/resolved.conf.d/adguard-dot.conf
View File

@ -6,7 +6,7 @@ DNS=2a10:50c0::ad1:ff#dns.adguard.com 94.140.14.14#dns.adguard.com 2a10:50c0::ad
Domains=~. Domains=~.
# non-tech friendliness in case system down for ages. Also DNSSEC ensures # non-tech friendliness in case system down for ages. Also DNSSEC ensures
# the DNS server isn't lying which is a task of adblocking DNS server... # the DNS server isn't lying which is a task of adblocking DNS server...
DNSSEC=allow-downgrade DNSSEC=false
# There is no point of disabling this with adblocking DNS # There is no point of disabling this with adblocking DNS
DNSOverTLS=true DNSOverTLS=true
Cache=true Cache=true

8
etc/systemd/resolved.conf.d/dot-mullvad-adblock-strict.conf Normal file
View File

@ -0,0 +1,8 @@
[Resolve]
DNS=2a07:e340::3#adblock.doh.mullvad.net 194.242.2.3#adblock.doh.mullvad.net 193.19.108.3#adblock.doh.mullvad.net
Domains=~.
# non-tech friendliness in case system down for ages. Also DNSSEC ensures
# the DNS server isn't lying which is a task of adblocking DNS server...
DNSSEC=false
DNSOverTLS=true
Cache=true

6
etc/systemd/resolved.conf.d/dot-mullvad-strict.conf Normal file
View File

@ -0,0 +1,6 @@
[Resolve]
DNS=2a07:e340::2#doh.mullvad.net 194.242.2.2#doh.mullvad.net 193.19.108.2#doh.mullvad.net
Domains=~.
DNSSEC=true
DNSOverTLS=true
Cache=true