Mikaela/shell-things
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git synced 2025-08-19 12:47:27 +02:00
Code Issues Projects Releases Wiki Activity

Compare commits

base: Mikaela:99c1c11e242c01f7b31b269d3e418646d4541196
Branches Tags
Mikaela:cxefa
...
compare: Mikaela:6159876f059e79a2d6ef1f76d754943605bfae7e
Branches Tags
Mikaela:cxefa

2 Commits
99c1c11e24 ... 6159876f05

Author SHA1 Message Date
Aminda Suomalainen
6159876f05
unbound/blocklist.conf: add {reddit,twitter}.com to support the protest 2023-06-11 18:53:16 +03:00
Aminda Suomalainen
f61d8c3edb
systemd/dnsproxy.service: use the same DNS0 for bootstrap as DoH 2023-06-11 08:56:04 +03:00
2 changed files with 6 additions and 2 deletions
Show Stats Expand all files Collapse all files

4
etc/systemd/system/dnsproxy.service
View File

@ -9,8 +9,8 @@ Type=simple
# -v is verbose output, journalctl -u dnsproxy # -v is verbose output, journalctl -u dnsproxy
# 127.0.2.1@53 comes from https://gitea.blesmrt.net/mikaela/shell-things/src/branch/master/etc/unbound/unbound.conf.d/dnscrypt-proxy.conf # 127.0.2.1@53 comes from https://gitea.blesmrt.net/mikaela/shell-things/src/branch/master/etc/unbound/unbound.conf.d/dnscrypt-proxy.conf
# and it's not a privileged port https://gitea.blesmrt.net/mikaela/shell-things/src/branch/master/etc/sysctl.d/23-starts-unprivileged-ports.conf # and it's not a privileged port https://gitea.blesmrt.net/mikaela/shell-things/src/branch/master/etc/sysctl.d/23-starts-unprivileged-ports.conf
# The DoH server is self-explanatory, bootstrap is Quad9 with ECS # The DoH server is self-explanatory, bootstrap is the same DNS0:53
ExecStart=/usr/local/bin/dnsproxy -v -l 127.0.2.1 -p 53 -u https://dns0.eu/ -b 149.112.112.11:53 -b 9.9.9.11:53 -b [2620:fe::11]:53 -b [2620:fe::fe:11]:53 --http3 ExecStart=/usr/local/bin/dnsproxy -v -l 127.0.2.1 -p 53 -u https://dns0.eu/ -b 193.110.81.0:53 -b 185.253.5.0:53 -b [2a0f:fc80::]:53 -b [2a0f:fc81::]:53 --http3
Restart=always Restart=always
RestartSec=5s RestartSec=5s
User=unbound User=unbound

4
etc/unbound/unbound.conf.d/blocklist.conf
View File

@ -18,3 +18,7 @@ local-zone: "matrix.to." always_refuse
# A lot of apps integrating Facebook in any form on mobile call this domain # A lot of apps integrating Facebook in any form on mobile call this domain
# in particular, likely websites too. # in particular, likely websites too.
local-zone: "graph.facebook.com." always_refuse local-zone: "graph.facebook.com." always_refuse
# Protesting the API pricing
local-zone: "reddit.com." always_refuse
local-zone: "twitter.com." always_refuse