Files
homelab/kubernetes/app/pihole/configmap-dnscrypt.yaml

34 lines
1013 B
YAML

apiVersion: v1
kind: ConfigMap
metadata:
name: dnscrypt-config
namespace: pihole
data:
dnscrypt-proxy.toml: |
listen_addresses = ['127.0.0.1:5353']
max_clients = 250
ipv4_servers = true
ipv6_servers = true
block_ipv6 = false
dnscrypt_servers = true
doh_servers = true
require_dnssec = true
force_tcp = false
timeout = 5000
keepalive = 30
lb_strategy = 'ph'
cache = false
http3 = true
http3_probe = true
fallback_resolvers = ['8.8.8.8:53', '1.1.1.1:53']
ignore_system_dns = true
server_names = ['cloudflare', 'google', 'quad9-dnscrypt-ip4-filter-pri', 'mullvad-doh', 'dns4eu']
[sources]
[sources.'public-resolvers']
urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md', 'https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md']
cache_file = '/tmp/public-resolvers.md'
minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'