systemd-resolved → knot-resolver
This commit is contained in:
parent
5b4e45f5e1
commit
6f9a7ffdaf
|
@ -19,6 +19,7 @@ Packages =
|
||||||
sudo
|
sudo
|
||||||
git
|
git
|
||||||
sqlite3
|
sqlite3
|
||||||
|
knot-resolver
|
||||||
man-db
|
man-db
|
||||||
curl
|
curl
|
||||||
lsof
|
lsof
|
||||||
|
|
|
@ -0,0 +1,19 @@
|
||||||
|
net.listen('127.0.0.50', 53, { kind = 'dns', freebind = true })
|
||||||
|
|
||||||
|
-- Load useful modules
|
||||||
|
modules = {
|
||||||
|
'hints > iterate', -- Allow loading /etc/hosts or custom root hints
|
||||||
|
'stats', -- Track internal statistics
|
||||||
|
'predict', -- Prefetch expiring/frequent records
|
||||||
|
}
|
||||||
|
|
||||||
|
-- Forward requests to those resolvers over TLS
|
||||||
|
policy.TLS_FORWARD({
|
||||||
|
-- UncensoredDNS <https://blog.uncensoreddns.org/>
|
||||||
|
{'2a01:3a0:53:53::', hostname='unicast.uncensoreddns.org'},
|
||||||
|
{'89.233.43.71', hostname='unicast.uncensoreddns.org'},
|
||||||
|
{'2001:67c:28a4::', hostname='anycast.uncensoreddns.org'},
|
||||||
|
{'91.239.100.100', hostname='anycast.uncensoreddns.org'},
|
||||||
|
})
|
||||||
|
|
||||||
|
cache.size = 100 * MB
|
|
@ -1 +1 @@
|
||||||
nameserver 127.0.0.53
|
nameserver 127.0.0.50
|
||||||
|
|
|
@ -1 +1 @@
|
||||||
Subproject commit 808de3fdbfb87630970ddcdb49cfd14c7ba3c127
|
Subproject commit 7330f3a7699b107de2df8547cc42af93f6a93fc3
|
|
@ -18,4 +18,5 @@ if [[ $OS = "arch" ]]; then
|
||||||
systemctl enable php-fpm
|
systemctl enable php-fpm
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
systemctl enable kresd@0
|
||||||
systemctl enable sftpgo
|
systemctl enable sftpgo
|
||||||
|
|
Loading…
Reference in New Issue