72 lines
2.1 KiB
TOML
72 lines
2.1 KiB
TOML
server_names = ["cloudflare", "cloudflare-ipv6"]
|
|
listen_addresses = ["127.0.0.1:53", "[::1]:53"]
|
|
max_clients = 250
|
|
ipv4_servers = true
|
|
ipv6_servers = true
|
|
disabled_server_names = []
|
|
dnscrypt_servers = true
|
|
doh_servers = true
|
|
require_dnssec = true
|
|
require_nolog = true
|
|
require_nofilter = true
|
|
daemonize = false
|
|
force_tcp = false
|
|
dnscrypt_ephemeral_keys = false
|
|
tls_disable_session_tickets = false
|
|
offline_mode = false
|
|
timeout = 5000
|
|
keepalive = 30
|
|
lb_estimator = false
|
|
netprobe_timeout = 60
|
|
netprobe_address = "9.9.9.9:53"
|
|
log_level = 0
|
|
use_syslog = false
|
|
cert_refresh_delay = 240
|
|
fallback_resolvers = ["9.9.9.9:53", "8.8.8.8:53"]
|
|
ignore_system_dns = true
|
|
log_files_max_size = 10
|
|
log_files_max_age = 7
|
|
log_files_max_backups = 1
|
|
block_ipv6 = false
|
|
block_unqualified = true
|
|
block_undelegated = true
|
|
reject_ttl = 600
|
|
cache = true
|
|
cache_size = 4096
|
|
cache_min_ttl = 2400
|
|
cache_max_ttl = 86400
|
|
cache_neg_min_ttl = 60
|
|
cache_neg_max_ttl = 600
|
|
|
|
[query_log]
|
|
format = "ltsv"
|
|
|
|
[nx_log]
|
|
format = "ltsv"
|
|
|
|
[blacklist]
|
|
|
|
[ip_blacklist]
|
|
|
|
[anonymized_dns]
|
|
skip_incompatible = false
|
|
|
|
[broken_implementations]
|
|
fragments_blocked = ["cisco", "cisco-ipv6", "cisco-familyshield", "cisco-familyshield-ipv6", "quad9-dnscrypt-ip4-filter-alt", "quad9-dnscrypt-ip4-filter-pri", "quad9-dnscrypt-ip4-nofilter-alt", "quad9-dnscrypt-ip4-nofilter-pri", "quad9-dnscrypt-ip6-filter-alt", "quad9-dnscrypt-ip6-filter-pri", "quad9-dnscrypt-ip6-nofilter-alt", "quad9-dnscrypt-ip6-nofilter-pri", "cleanbrowsing-adult", "cleanbrowsing-family-ipv6", "cleanbrowsing-family", "cleanbrowsing-security"]
|
|
|
|
[sources]
|
|
|
|
[sources.public-resolvers]
|
|
urls = ["https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v2/public-resolvers.md", "https://download.dnscrypt.info/resolvers-list/v2/public-resolvers.md"]
|
|
minisign_key = "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3"
|
|
cache_file = "public-resolvers.md"
|
|
refresh_delay = 0
|
|
prefix = ""
|
|
|
|
[sources.relays]
|
|
urls = ["https://github.com/DNSCrypt/dnscrypt-resolvers/raw/master/v2/relays.md", "https://download.dnscrypt.info/resolvers-list/v2/relays.md"]
|
|
minisign_key = "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3"
|
|
cache_file = "relays.md"
|
|
refresh_delay = 72
|
|
prefix = ""
|