You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
132 lines
2.0 KiB
TOML
132 lines
2.0 KiB
TOML
####################################################
|
|
# #
|
|
# Encrypted DNS Server configuration #
|
|
# #
|
|
####################################################
|
|
|
|
|
|
|
|
##################################
|
|
# Global settings #
|
|
##################################
|
|
|
|
|
|
## IP addresses and ports to listen to
|
|
|
|
listen_addrs = ["0.0.0.0:443", "[::1]:4443"]
|
|
|
|
|
|
## IP address to connect to upstream servers from
|
|
|
|
external_addr = "0.0.0.0"
|
|
|
|
|
|
## File name to save the state to
|
|
|
|
state_file = "encrypted-dns.state"
|
|
|
|
|
|
## Upstream DNS server and port
|
|
|
|
upstream_addr = "9.9.9.9:53"
|
|
|
|
|
|
## UDP timeout in seconds
|
|
|
|
udp_timeout = 10
|
|
|
|
|
|
## TCP timeout in seconds
|
|
|
|
tcp_timeout = 10
|
|
|
|
|
|
## Maximum active UDP sockets
|
|
|
|
udp_max_active_connections = 1000
|
|
|
|
|
|
## Maximum active TCP connections
|
|
|
|
tcp_max_active_connections = 100
|
|
|
|
|
|
## Built-in DNS cache capacity
|
|
|
|
cache_capacity = 10000
|
|
|
|
|
|
## DNS cache: minimum TTL
|
|
|
|
cache_ttl_min = 600
|
|
|
|
|
|
## DNS cache: max TTL
|
|
|
|
cache_ttl_max = 86400
|
|
|
|
|
|
## DNS cache: error TTL
|
|
|
|
cache_ttl_error = 600
|
|
|
|
|
|
## Run as a background process
|
|
|
|
daemonize = false
|
|
|
|
|
|
## Log file
|
|
|
|
# log_file = "/tmp/encrypted-dns.log"
|
|
|
|
|
|
## PID file
|
|
|
|
# pid_file = "/tmp/encrypted-dns.pid"
|
|
|
|
|
|
## User name to drop privileges to, when started as root.
|
|
|
|
# user = "nobody"
|
|
|
|
|
|
## Group name to drop privileges to, when started as root.
|
|
|
|
# group = "nobody"
|
|
|
|
|
|
## Path to chroot() to, when started as root.
|
|
## The path to the state file is relative to the chroot base.
|
|
|
|
# chroot = "/var/empty"
|
|
|
|
|
|
|
|
####################################
|
|
# DNSCrypt settings #
|
|
####################################
|
|
|
|
[dnscrypt]
|
|
|
|
## Provider name (with or without the `2.dnscrypt-cert.` prefix)
|
|
|
|
provider_name = "secure.dns.test"
|
|
|
|
|
|
## Key cache capacity, per certificate
|
|
|
|
key_cache_capacity = 10000
|
|
|
|
|
|
|
|
###############################
|
|
# TLS settings #
|
|
###############################
|
|
|
|
[tls]
|
|
|
|
## Where to prooxy TLS connections to (e.g. DoH server)
|
|
|
|
# upstream_addr = "127.0.0.1:4343"
|