Added DOT_PRIVATE_ADDRESS environment variable

internal/params/dns.go

@@ -107,3 +107,12 @@ func (p *paramsReader) GetDNSOverTLSCaching() (caching bool, err error) {
 	return p.envParams.GetOnOff("DOT_CACHING")
 }
 
+// GetDNSOverTLSPrivateAddresses obtains if Unbound caching should be enable or not
+// from the environment variable DOT_PRIVATE_ADDRESS
+func (p *paramsReader) GetDNSOverTLSPrivateAddresses() (privateAddresses []string) {
+	s, _ := p.envParams.GetEnv("DOT_PRIVATE_ADDRESS")
+	for _, s := range strings.Split(s, ",") {
+		privateAddresses = append(privateAddresses, s)
+	}
+	return privateAddresses
+}

internal/params/params.go

@@ -23,6 +23,7 @@ type ParamsReader interface {
 	GetDNSSurveillanceBlocking() (blocking bool, err error)
 	GetDNSAdsBlocking() (blocking bool, err error)
 	GetDNSUnblockedHostnames() (hostnames []string, err error)
+	GetDNSOverTLSPrivateAddresses() (privateAddresses []string)
 
 	// Firewall getters
 	GetExtraSubnets() (extraSubnets []net.IPNet, err error)

internal/settings/dns.go

@@ -102,16 +102,6 @@ func GetDNSSettings(params params.ParamsReader) (settings DNS, err error) {
 	if err != nil {
 		return settings, err
 	}
-	settings.PrivateAddresses = []string{ // TODO make env variable
-		"127.0.0.1/8",
-		"10.0.0.0/8",
-		"172.16.0.0/12",
-		"192.168.0.0/16",
-		"169.254.0.0/16",
-		"::1/128",
-		"fc00::/7",
-		"fe80::/10",
-		"::ffff:0:0/96",
-	}
+	settings.PrivateAddresses = params.GetDNSOverTLSPrivateAddresses()
 	return settings, nil
 }