servnest-mkosi/mkosi.extra/etc/knot-resolver/kresd.conf

20 lines
673 B
Plaintext

net.listen('127.0.0.50', 53, { kind = 'dns', freebind = true })
-- Load useful modules
modules = {
'hints > iterate', -- Allow loading /etc/hosts or custom root hints
'stats', -- Track internal statistics
'predict', -- Prefetch expiring/frequent records
}
-- Forward requests to those resolvers over TLS
policy.TLS_FORWARD({
-- UncensoredDNS <https://blog.uncensoreddns.org/>
{'2a01:3a0:53:53::', hostname='unicast.uncensoreddns.org'},
{'89.233.43.71', hostname='unicast.uncensoreddns.org'},
{'2001:67c:28a4::', hostname='anycast.uncensoreddns.org'},
{'91.239.100.100', hostname='anycast.uncensoreddns.org'},
})
cache.size = 100 * MB