Mikaela/shell-things
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git synced 2025-08-19 12:47:27 +02:00
Code Issues Projects Releases Wiki Activity

Compare commits

base: Mikaela:fe16d45f144a380741c3cae867ba76f32289cf7f
Branches Tags
Mikaela:cxefa
...
compare: Mikaela:9fdeb567628e07fefa4a14b2721e911cd9fbc49d
Branches Tags
Mikaela:cxefa

3 Commits
fe16d45f14 ... 9fdeb56762

Author SHA1 Message Date
Aminda Suomalainen
9fdeb56762
unbound.service.d: add fedora-network-pre.conf 2023-08-04 13:09:58 +03:00
Aminda Suomalainen
34b4ffb8ac
unbound/dns-over-tls.conf: cut to 443 and private ECS capable non-filtering servers 2023-08-04 12:45:03 +03:00
Aminda Suomalainen
d024ac1234
Revert "rm etc/unbound/unbound.conf.d/dns-over-tls.conf" 
This reverts commit e9998f4079a274182ec25bdb9a6ae17f7f42b7a0.
 2023-08-04 12:27:41 +03:00
2 changed files with 40 additions and 0 deletions
Show Stats Expand all files Collapse all files

11
etc/systemd/system/unbound.service.d/fedora-network-pre.conf Normal file
View File

@ -0,0 +1,11 @@
# This override attempts to ensure Unbound is running when network gets
# connected as opposed to starting at that time to ensure DNS functions for
# everything dependent on DNS in addition to just internet connectivity
[Unit]
After=
# Copy-pasted from Fedora (systemtl show unbound.service) except
# network-online.target is network-pre.target
After=unbound-keygen.service unbound-anchor.service systemd-journald.socket sysinit.target network-pre.target system.slice basic.target
[Install]
WantedBy=multi-user.target network-online.target

29
etc/unbound/unbound.conf.d/dns-over-tls.conf Normal file
View File

@ -0,0 +1,29 @@
server:
# Debian ca-certificates location
tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
# Fedora location
#tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
# This list is for my travel laptop to have at least one DoT443 server
# which seems to be applied-privacy.net. They advice having multiple DoT servers
# for redundancy and as they don't filter, it's best I use other non-filtering ones.
forward-zone:
name: "."
forward-tls-upstream: yes
# https://appliedprivacy.net/services/dns/ - Vienna, Austria
forward-addr: 2a02:1b8:10:234::2@443#dot1.applied-privacy.net
forward-addr: 146.255.56.98@443#dot1.applied-privacy.net
# https://www.dns0.eu/open https://www.dns0.eu/network - French based. Private ECS
forward-addr: 193.110.81.254@853#open.dns0.eu
forward-addr: 185.253.5.254@853#open.dns0.eu
forward-addr: 2a0f:fc80::ffff@853#open.dns0.eu
forward-addr: 2a0f:fc81::ffff@853#open.dns0.eu
# Adguard DNS Unfiltered Anycast. Malta based. Private ECS.
forward-addr: 2a10:50c0::1:ff@853#unfiltered.adguard-dns.com
forward-addr: 2a10:50c0::2:ff@853#unfiltered.adguard-dns.com
forward-addr: 94.140.14.140@853#unfiltered.adguard-dns.com
forward-addr: 94.140.14.141@853#unfiltered.adguard-dns.com