oleksandr/homelab
1
0
Fork 0
Code Pull Requests Activity

feat(k8s/pihole): improve dnscrypt-proxy config

Browse Source
This commit is contained in:
Oleksandr Berezovskyi
2026-03-22 16:46:36 +02:00
parent e828d6dd37
commit a28a69df76
2 changed files with 13 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
kubernetes/app/pihole/configmap-dnscrypt.yaml
View File

@@ -12,28 +12,22 @@ data:
block_ipv6 = true block_ipv6 = true
dnscrypt_servers = true dnscrypt_servers = true
doh_servers = true doh_servers = true
require_dnssec = false require_dnssec = true
force_tcp = false force_tcp = false
timeout = 5000 timeout = 5000
keepalive = 30 keepalive = 30
lb_strategy = 'p2' lb_strategy = 'ph'
cache = true cache = false
cache_size = 4096
cache_min_ttl = 2400
cache_max_ttl = 86400
http3 = true http3 = true
http3_probe = true http3_probe = true
fallback_resolvers = ['8.8.8.8:53', '1.1.1.1:53'] fallback_resolvers = ['8.8.8.8:53', '1.1.1.1:53']
ignore_system_dns = true ignore_system_dns = true
server_names = [] server_names = ['cloudflare', 'google', 'quad9-dnscrypt-ip4-filter-pri', 'mullvad-doh', 'dns4eu']
[static] [sources]
# Cloudflare DoH [sources.'public-resolvers']
[static.'cloudflare'] urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md', 'https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md']
stamp = 'sdns://AgcAAAAAAAAABzEuMC4wLjEAEmRucy5jbG91ZGZsYXJlLmNvbQovZG5zLXF1ZXJ5' cache_file = '/tmp/public-resolvers.md'
minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
# Google DoH
[static.'google']
stamp = 'sdns://AgUAAAAAAAAABzguOC44LjggsKKKE4EwvtIbNjGjagI2607EdKSVHowYZtyvD9iPrkkHOC44LjguOAovZG5zLXF1ZXJ5'

4
kubernetes/app/pihole/deployment.yaml
View File

@@ -97,6 +97,8 @@ spec:
- name: dnscrypt-config - name: dnscrypt-config
mountPath: /config/dnscrypt-proxy.toml mountPath: /config/dnscrypt-proxy.toml
subPath: dnscrypt-proxy.toml subPath: dnscrypt-proxy.toml
- name: dnscrypt-tmp
mountPath: /tmp
volumes: volumes:
- name: pihole-config - name: pihole-config
@@ -110,6 +112,8 @@ spec:
- name: pihole-adlists - name: pihole-adlists
configMap: configMap:
name: pihole-adlists name: pihole-adlists
- name: dnscrypt-tmp
emptyDir: {}
- name: dnscrypt-config - name: dnscrypt-config
configMap: configMap:
name: dnscrypt-config name: dnscrypt-config