admin/gluetun
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
e6b5166c7fa7a16f93e56b51ed27c0deba908adf
gluetun/unbound.conf

46 lines
976 B
Plaintext
Raw Normal View History

Re-added Unbound DNS over TLS It turns out you can't use a local DNS server once connected with the VPN, so running the DNS over TLS in the PIA container is the best.
2018-09-21 11:28:23 +02:00
server:
Multiple additions and fixes #5 - Multi stage build - Download and checks Unbound Root anchors - Download and build malicious hostnames block list for Unbound - Healthcheck only based on the current IP being different from the initial IP - IPv6 related completely removed - Multiple checks at launch with $? - Launch openvpn as root (can't change user) - Unbound configured with DNS SEC for DNS over TLS
2018-10-04 22:24:43 +02:00
# See https://www.nlnetlabs.nl/documentation/unbound/unbound.conf/
# logging
Re-added Unbound DNS over TLS It turns out you can't use a local DNS server once connected with the VPN, so running the DNS over TLS in the PIA container is the best.
2018-09-21 11:28:23 +02:00
verbosity: 0
Multiple additions and fixes #5 - Multi stage build - Download and checks Unbound Root anchors - Download and build malicious hostnames block list for Unbound - Healthcheck only based on the current IP being different from the initial IP - IPv6 related completely removed - Multiple checks at launch with $? - Launch openvpn as root (can't change user) - Unbound configured with DNS SEC for DNS over TLS
2018-10-04 22:24:43 +02:00
val-log-level: 2
use-syslog: no
# performance
num-threads: 1
Re-added Unbound DNS over TLS It turns out you can't use a local DNS server once connected with the VPN, so running the DNS over TLS in the PIA container is the best.
2018-09-21 11:28:23 +02:00
prefetch: yes
Multiple additions and fixes #5 - Multi stage build - Download and checks Unbound Root anchors - Download and build malicious hostnames block list for Unbound - Healthcheck only based on the current IP being different from the initial IP - IPv6 related completely removed - Multiple checks at launch with $? - Launch openvpn as root (can't change user) - Unbound configured with DNS SEC for DNS over TLS
2018-10-04 22:24:43 +02:00
prefetch-key: yes
key-cache-size: 16m
key-cache-slabs: 4
msg-cache-size: 4m
msg-cache-slabs: 4
rrset-cache-size: 4m
rrset-cache-slabs: 4
cache-min-ttl: 3600
cache-max-ttl: 9000
# privacy
Re-added Unbound DNS over TLS It turns out you can't use a local DNS server once connected with the VPN, so running the DNS over TLS in the PIA container is the best.
2018-09-21 11:28:23 +02:00
rrset-roundrobin: yes
Multiple additions and fixes #5 - Multi stage build - Download and checks Unbound Root anchors - Download and build malicious hostnames block list for Unbound - Healthcheck only based on the current IP being different from the initial IP - IPv6 related completely removed - Multiple checks at launch with $? - Launch openvpn as root (can't change user) - Unbound configured with DNS SEC for DNS over TLS
2018-10-04 22:24:43 +02:00
hide-identity: yes
hide-version: yes
# security
root-hints: "/etc/unbound/root.hints"
trust-anchor-file: "/etc/unbound/root.key"
harden-below-nxdomain: yes
harden-referral-path: yes
harden-algo-downgrade: yes
# set above to no if there is any problem
# network
Re-added Unbound DNS over TLS It turns out you can't use a local DNS server once connected with the VPN, so running the DNS over TLS in the PIA container is the best.
2018-09-21 11:28:23 +02:00
do-ip4: yes
do-ip6: no
interface: 127.0.0.1
Multiple additions and fixes #5 - Multi stage build - Download and checks Unbound Root anchors - Download and build malicious hostnames block list for Unbound - Healthcheck only based on the current IP being different from the initial IP - IPv6 related completely removed - Multiple checks at launch with $? - Launch openvpn as root (can't change user) - Unbound configured with DNS SEC for DNS over TLS
2018-10-04 22:24:43 +02:00
# other files
include: "/etc/unbound/blocks-malicious.conf"
Re-added Unbound DNS over TLS It turns out you can't use a local DNS server once connected with the VPN, so running the DNS over TLS in the PIA container is the best.
2018-09-21 11:28:23 +02:00
forward-zone:
name: "."
forward-addr: 1.1.1.1@853#cloudflare-dns.com
forward-addr: 1.0.0.1@853#cloudflare-dns.com
Multiple additions and fixes #5 - Multi stage build - Download and checks Unbound Root anchors - Download and build malicious hostnames block list for Unbound - Healthcheck only based on the current IP being different from the initial IP - IPv6 related completely removed - Multiple checks at launch with $? - Launch openvpn as root (can't change user) - Unbound configured with DNS SEC for DNS over TLS
2018-10-04 22:24:43 +02:00
forward-tls-upstream: yes
Reference in New Issue Copy Permalink