mirror of
https://gitea.blesmrt.net/mikaela/shell-things.git
synced 2024-11-02 15:59:22 +01:00
Mikaela Suomalainen
466a7bc2c1
These aren't seeing real world usage though as the only host not running dnscrypt-proxy has too old systemd.
16 lines
541 B
Plaintext
16 lines
541 B
Plaintext
[Resolve]
|
|
DNS=2620:fe::9 149.112.112.112 2620:fe::fe 9.9.9.9
|
|
Domains=~.
|
|
DNSSEC=true
|
|
DNSOverTLS=opportunistic
|
|
Cache=true
|
|
|
|
# Based on my test DNSOverTLS is not supported in Ubuntu 18.04.x LTS.
|
|
|
|
# Sources:
|
|
# https://wiki.archlinux.org/index.php/Systemd-resolved
|
|
# * request for strict DOT: https://github.com/systemd/systemd/issues/10755
|
|
# * vulnerable to MITM: https://github.com/systemd/systemd/issues/9397
|
|
# https://www.internetsociety.org/blog/2018/12/dns-privacy-in-linux-systemd
|
|
# * I wouldn't have found having to set `~.` without this.
|