apiVersion: v1
kind: ConfigMap
metadata:
  name: dnscrypt-config
  namespace: pihole
data:
  dnscrypt-proxy.toml: |
    listen_addresses = ['127.0.0.1:5353']
    max_clients = 250
    ipv4_servers = true
    ipv6_servers = false
    block_ipv6 = true
    dnscrypt_servers = true
    doh_servers = true
    require_dnssec = true
    force_tcp = false
    timeout = 5000
    keepalive = 30
    lb_strategy = 'ph'
    cache = false
    http3 = true
    http3_probe = true

    fallback_resolvers = ['8.8.8.8:53', '1.1.1.1:53']
    ignore_system_dns = true

    server_names = ['cloudflare', 'google', 'quad9-dnscrypt-ip4-filter-pri', 'mullvad-doh', 'dns4eu']

    [sources]
      [sources.'public-resolvers']
      urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md', 'https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md']
      cache_file = '/tmp/public-resolvers.md'
      minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'